{"report_id":"4a51e19f-e404-467f-8278-ded195f0c1a2","version":0,"status":"done","tags":[],"date":"2026-08-07T10:56:34Z","url":{"schema":"http","addr":"secured.tondrop.xyz/","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"secured.tondrop.xyz/","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"title":"Secured: Most Popular Online Crypto Casino \u0026 Prediction Markets","dom":{"size":383007,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (48685)","md5":"06e229475184a98e34b2a9b338ea656c","sha1":"5260525a5ee29e5c9bcb002316b5eb76af284bd8","sha256":"11131ee492c4b22f603e79c3c1fd73e9b15d1f396d4c6f620446cff94d8d599b","sha512":"a4765bd00a0dcfa5ea54c2ee8bd08cc676760c378188c79ce7638840e469c6cf641ff00c4fa260dab60e80e716e825f7a7b86b68732484aa96b2b8e9603944e7","ssdeep":"3072:6e+A1FPde8pLt6ZNZhBpZwNVPe2Ps2ZzKm:6e9zNkuzKm","tlshash":"a3841bbc120116bdb06b87e5fa50f3dea12bd199de93cd0df3ac82862bc6c98cd54594","dom_hash":"domhashb1cc95b54967b9826f730f424aba79d0","first_seen":"2026-08-07T10:56:41.887021Z","last_seen":"2026-08-07T10:56:41.887021Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"secured.tondrop.xyz/","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T10:56:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"secured.tondrop.xyz","ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-08-07T10:50:34.928007Z","last_seen":"2026-08-07T10:50:34.928007Z","alert_count":0,"request_count":44,"received_data":5919102,"sent_data":28185,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mycasinoapi.biz","ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-10T22:57:00.871632Z","last_seen":"2026-08-03T05:12:47.185768Z","alert_count":0,"request_count":42,"received_data":3889838,"sent_data":23399,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"op-api.gambl.bet","ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T22:56:41.726368Z","last_seen":"2026-08-05T10:46:46.976059Z","alert_count":0,"request_count":2,"received_data":2406,"sent_data":1174,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":2,"received_data":61090,"sent_data":1150,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":4464,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/index-CcJL-ukj.js","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f40103b157e0fda649490fd24c46acb4","sha1":"427bc348f5e0002420d99ad7c09b5464485ab30f","sha256":"393bdd29aa4e7b7c6984431cbda0b76888230ae7aaa516ba0687d99a91a174b3","sha512":"68123810eb4f42603518e5a45328ff1021d2674cc03876ca59e083f647d65495161d913ec24f42a2a56ea6da97cd0c7bd31589c50abf3d4fa6a560a12bb605a6","ssdeep":"49152:BVXRJPo5C16PWw2WT/XXBYpN3iTuRECPA+2/jeN1Ntad4HIUmcl067w2laFmQHS5:FLtqLcl06chmQHfnr6ELX6","tlshash":"beb5ae4cb385b6bd576b66d4349e543eb03d1a38f56ec440e0fca82a24f5850a17bfac","size":2452171,"data":"","first_seen":"2026-07-25T23:02:50.539055Z","last_seen":"2026-08-09T21:23:30.781036Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-11T04:58:29.799178Z","times_seen":378286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is maintained with support from Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://secured.tondrop.xyz/assets/index-CcJL-ukj.js","line_number":9,"column_number":70797}]},"http":[{"url":{"schema":"https","addr":"secured.tondrop.xyz/","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T10:55:59.552Z","timestamp":1786100159552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 07 Aug 2026 10:55:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nset-cookie: __ddg8_=XcYGKGpSD1HVeyT1; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:15:59 GMT\n__ddg10_=1786100159; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:15:59 GMT\n__ddg9_=172.64.209.36; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:15:59 GMT\n__ddg1_=zC8qHwK6BoxmmcEskWvu; Domain=.tondrop.xyz; HttpOnly; Path=/; Expires=Sat, 07-Aug-2027 10:55:59 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EY7LdX0T%2BoAoP4BJUjoYnsL0aDb%2B26EoILkyZsliTdFOgdvjIV8Sm9AtoSWBu%2F3py%2BhsEnQrRpByRfDaEott2KF7%2BImKC6mhq%2BTacf9S5u4q3iXK9T1QU6f0RV6UcKLNjqhG%2FC6m\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a275c08d5ca2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":1829,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ac8870004e95938301118d69bdbfeeac","sha1":"3f12e8161c586c0efdd13ce0f6c9de4185061087","sha256":"746b65f2a1f569a82f6676360115915045941bf44a37cb3b2456c58810f90d07","sha512":"9eeac506030ae66d95629ef203c598ef4a71ecca6344b85ad536279b9aff023cf0d929e49090a0bd563063a14e39ebacef1a3f326b809d23d1ca7b14f7c180e4","ssdeep":"","tlshash":"e841065351b09424229583341ee3f56c9e2e858793486d99b6a450ef0fc67d0cbf7bb2","first_seen":"2026-07-25T23:02:50.471396Z","last_seen":"2026-08-09T21:23:30.75872Z","times_seen":16,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":211,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/ripple-DG_x0ao9.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.364Z","timestamp":1786100161364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/ripple-DG_x0ao9.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=zNoEAs2XPRrCBcaf; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.36; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-1096\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4wosJnvn1vyjQ7vwXLGndUV6KXBT49cJiG%2FvGG%2Fx6TASyONtRuXRCZUU8qarzLE3IEcUMuWEOURtQCTN4wGXJmknAjdMNAGFp%2FEsUqvIA4MVphp8xTAztP%2Fi2umdvA%2B54wBlzMf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098893d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4246,"size_decoded":3018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"668b47cfc023c8a691e80389bb5fd455","sha1":"2f1711702c2fc16060572dea79d3ce43ade79063","sha256":"dd3cfa287ffaa2afa98ec543a129d05366bd9dc5f48f30e2464c49ded9ad0f99","sha512":"919b1dcb302d98ce735a63838a00fe067874bff76f3ba76095fc61afe5228f3a19f4ac038a0e05d5e31fdf607c3442c754e60fdf77e5a5232ce07493d7a71b2a","ssdeep":"96:o0Wo/HqlWSTKxG4HU1C+2McValTyf+i0YW2/Z80kR:o0Wo/Ktd40T2M5yf+i0YW2C0S","tlshash":"1e91c4da73b592fcf446e3e0e9331c39768bb1f11a23cd26ce955d42e1a189d0824c97","first_seen":"2026-05-03T09:25:58.44074Z","last_seen":"2026-08-09T21:23:30.78014Z","times_seen":40,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20wwgcluster.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.124Z","timestamp":1786100162124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20wwgcluster.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"64b4-19e87ecca23\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:42 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfGtXFnYPk7YZn%2FA%2BjF9XgWsBC8hDcJJHwgOoKOqQD06yfOygbG3mSDTTsQj9XxGZc%2BQJri0abXyqKfC8jRzV0uZ2KzlqTy6jCW3rDgwPCMBtDnMwGoJDbH9eJF8hC8KBUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dc9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25780,"size_decoded":27205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"466585300847fa0e13987ef5dca6b7a9","sha1":"90fca47f54ecf010dd26cb69ce2865921c028dce","sha256":"9ff5266fea78992d2da49b274dcaad4c97241690a59d0d532e1b3c28090fc815","sha512":"ff9d83dda4da71c8b00c3bf981285093a45f7f48740845a72719f038a072e340284e0750e2662395cb2f1525d423cd5072a388a734139f7e56b62aaa10ea2a81","ssdeep":"768:6Krbogtb1sc931tNEV5/iP7cTPTGfdYjj9g/HhsgoayC:6yMgt5/fyqPvfQj9DEy","tlshash":"03c2e1630732b2b96d7aa69cf89e2bdb115f6011b38d107750a2387dc016eb734242f2","first_seen":"2026-07-10T22:56:48.045744Z","last_seen":"2026-08-09T21:23:30.770862Z","times_seen":34,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10262.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.147Z","timestamp":1786100162147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10262.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"32004-19e87ead7e0\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xI%2B9jmyLWoIDEBMEE3bM6Hi%2FZEwuTZ3j0KTfx%2BMszyM9mfseWBh8wVacy10Txvwdli5Qfr6m6LfF6B5QDeDK4YRkBUYH9Hce1EXk6H%2B%2BUY2H9CpTzEkg93%2FLtI%2B2ChLkKCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d6dd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 204804\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204804,"size_decoded":206239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9a6c2e704360080a9d155aaca41dc7b","sha1":"e7fe64b1e90775c6be56a3b367227f1e8ec4fa26","sha256":"e5edc42ae27e9c674f054306d70e9659052553faa2e1fa1f6e51f4ba447302de","sha512":"3677c41a699fbaa8b9592820fde05900206c58b92454549e38163bda47ee20d272a9ce64e51a37f1bf330de18032b611055b0ad3c38ca885165ac3f388478986","ssdeep":"3072:gsxjX/j44U6j6BE3qTEJIGhiHaKZZ80pBOj99+e4Kn+/zauEdKOhVW66h:gsVvbU6jLhIG3Ko0299Ezadlhf6h","tlshash":"e81413c1f238063995809da8fe4464648a75fe4778887760829c0ddf94a0eddfdbbbc6","first_seen":"2026-07-10T22:56:48.11985Z","last_seen":"2026-08-09T21:13:42.815989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10260.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.153Z","timestamp":1786100162153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10260.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"341fa-19e87ead644\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmoNar%2B4xYE5vKkCt8RY7vnGSo9pUQVEhthSoSnxRPqNceJdFj0WAMO%2FaKbxIomV8i3kL3SFeeAJ8Vnl7E3ovatlFximSXHHV2%2BA8D5m95S5JHcTKraiSBa%2Fn6Yf%2BGb8YfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d7ddab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 213498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213498,"size_decoded":214929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8abd15c7c82243f7f1bcfc01da0f9dd9","sha1":"2a7cbaf9fda3b75d09d22b9bcfcfd2ed5ead3b77","sha256":"6dbffd082137525d217970ea7459025b8e17cd4cff6f3124c737c9a181649021","sha512":"4af84cb47e5f98a5db589e57665b3206840b58e546e91c827e2704581606391ef87d65e23c32c9b82a8a899970b66a13e698c830d8992d1b36bb2642415cab06","ssdeep":"3072:lP73hNQFdhmSicyXxh75IObuYWaw64mXkjrwSzitUzuMosw2jNZW:ptNQjhmSicyhhWHar0jretU0CN8","tlshash":"da2423e1c38707d4c3ee5ae1d1e70d9b02b83b78109eb0048ded8994a9e59c1d97e1ed","first_seen":"2026-07-10T22:57:05.866145Z","last_seen":"2026-08-09T20:13:23.809639Z","times_seen":18,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/d-rocket-CwVijRid.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.342Z","timestamp":1786100161342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/d-rocket-CwVijRid.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=uDTCaOqG3uw0NDck; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.28; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-2a84e\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F5TZGzy1OZ9eyIA9OOpvAjuipMIu1wEmZKACSqm2Y1fTam1Eal0Dnq8XOgFG8aVzbqm63GcY85YTCl7g9KRXKbXj%2BRumS2GvFZaQehGHCKDFj2G0kjaddOFijx45brTCevPvBbr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09859355690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174158,"size_decoded":175251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c927ce999d40abaafc51fb02a321a3c","sha1":"fe5b860fccb15b759c8d81556f525c64ea30780c","sha256":"5763965cfa076dd8724c9e18c72ee4fd3ab93a9575a569b4531e1824f55c5362","sha512":"fb2b012d4e84f302700458c582f79dbfc097140fc5d47b53ac805b3f0ab62ac50c3a2aeb5a89d10b3edc6fee590d7996f932c9adbeaa6f1a0931836d9a6b3eb0","ssdeep":"3072:WGyzqM0MhVkJ69+b1oBjitPI+1fm5pJ6c4tHWFsPVWUoYKTxnwjilTlgeX:uA69+Ryom5DH4HusPVgYKTKj8ljX","tlshash":"f404237a6e6f66470f6e9239c192f558ba08018f2d6e1ec8507f8cba71313f40a590f7","first_seen":"2026-05-03T09:25:58.570621Z","last_seen":"2026-08-09T21:23:30.701576Z","times_seen":40,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/ethereum-D8eyHuXQ.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.362Z","timestamp":1786100161362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/ethereum-D8eyHuXQ.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=GaiZ1OLz7sIouO6K; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.105; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-236e\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3TTsSqP5v6rxzseqw4KTa21h04jtFvma4ecG5HoXC5KegNi6bMRCk8So0S4KSMGjL3%2FhMjvTp4EXS1aDF9Lc1%2F4QEM5kcUuxZ7TuVJ5ibvRt2O0Pb%2F7nBR01RyJ0kP%2BeJh6BXQUa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098793c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9070,"size_decoded":4822,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3600c0025adc4a693fd9f69754a4290d","sha1":"68bf3099d8d50df03c01b81aed41164057af8809","sha256":"c48b1716c803c5bfbb672750b82165c8f130ad4d44812624664675ebcf69cf8a","sha512":"80af010cbbcfef04cd08a93fb2911771b19a5a20b6c48c46e27d9a30fbad65f6ce1d77a0aa881f7073eec8348ea3846a706986abf9ad88e528f2c9383b0f8be6","ssdeep":"192:ZRX+G88rKrcEShs9phbnhLCkZmNxDdtjK829vA+mCNCU1x87jFm4TGgBh2:F3KrcWaws4dCUgU4TZ2","tlshash":"9012c6ec5bf882d8f442e3eadd3684983aa39afb3791ce25c3549e05b41105c5896ed3","first_seen":"2026-05-03T09:25:58.499Z","last_seen":"2026-08-09T21:23:30.756637Z","times_seen":40,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/index-CcJL-ukj.js","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:00.237Z","timestamp":1786100160237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/index-CcJL-ukj.js HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=XcYGKGpSD1HVeyT1; __ddg10_=1786100159; __ddg9_=172.64.209.36; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=pCe6JZ0uqJwZnT4p; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\n__ddg10_=1786100160; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\n__ddg9_=162.158.222.105; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Fri, 07 Aug 2026 10:56:00 GMT\r\netag: W/\"6a5b8194-256acb\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlMkidvKAVJdP4DaHIzQLdOC8pRfWR%2FE3Ka6vkBTdtyuL4tR%2BJgi3QY8sqnp9PmFAHKk8HDmMTLj2woGuBEKMHekVmT2aqRYU2q%2BY%2BS85zb0Qzmz1HwwYu6XDD0YMe0ymtU%2FfWKO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a275c09178dd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 684158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452171,"size_decoded":685320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42322)","md5":"e501f3bf8d6ffd00c538dca0c5c1ff8b","sha1":"4d4a25eb332f7921a3e69d28c37baf05700e7007","sha256":"8c8be7761f362ff8461404c979c1886d7d235f27ea99ac106699e4d57c54d5db","sha512":"2e5a1e85eeed216d5ced7abb5815d474dcced613289614546affa3fae1d6c4a21dcad5a6610d75bd49ea572f053bb0ba963e1e2eda50cfdc3d1e8c6489571c0d","ssdeep":"24576:+kVG8scVJPo5MN1iJPWwmzWT/XXBY3Z/FLj3iH:BVXRJPo5C16PWw2WT/XXBYpN3iH","tlshash":"db258e1c67edb2a9059b724538492d3b757c143df6ea824198e8bb6f20f1c64c13fb68","first_seen":"2026-08-07T10:56:41.90583Z","last_seen":"2026-08-07T10:56:41.90583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10257.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.152Z","timestamp":1786100162152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10257.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"3384c-19e87ead47c\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llstd80go5eGloE6y8I1LY%2F%2FBMDAC3Mqmuj6F3oCWlwJfMceDl313628H2igOV3xH%2BMAkpVvqnWKPFaME7Yg1gUKSiJCJ5y9i13oTccXebbQSTOgzcKoyd4HyItNjffbbSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d7dd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 211020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211020,"size_decoded":212447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"189552713832c0ceec6cee1e5334b2d9","sha1":"c938ba54ed851fa652dc0dd22d4cca4046b096d9","sha256":"d5183248c268074f36938090436607fca8efe9860e3d1b185072b25ef306d22f","sha512":"06613edc5823f87b2dc1a1c584dfd81ebaf8bd68362ad3faede64f694874d47a4319d101ff270c12321622b24260522c8314766c78a77264c0cca8bbd8a316c1","ssdeep":"3072:Q7lHfxLOVWU5lzISF1sO9wYiiiLTGU4z7+4rmzAvLRzErb0Qruhx0zMuMYjwl:ItU5lkSLsO9biiinIKsdGoQy4gx","tlshash":"db2422779141e20752db1f5b6c0dacb710d1f2a8e0abd473ed314be6c6029a6c990eb7","first_seen":"2026-07-10T22:58:17.960702Z","last_seen":"2026-08-09T20:13:23.807029Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/support-4Z33OB_R.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.359Z","timestamp":1786100161359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/support-4Z33OB_R.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=74R8Dt3EP0vN8E9D; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.24; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-b536\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkqNJ%2B7gO%2FCFj7m1KLI54hqAiuqWPYiT7gWKnJrlWsTy3dUcBHza10t%2FRkQG%2BmjfixodkWgjzg98FV9WPz33lzMJou8uCZr1a5%2B8BEe0nrPgu1pze3oUJ2FPe%2B9R8NHLUX0JNFce\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098793a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46390,"size_decoded":47488,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9be49a67675fe3aa2c6dc15f5ff61c95","sha1":"76650d568ad89db5c0e0c0cd2a5833965e169ae4","sha256":"6349248b1e8b1735cd5ff25b389e4f5e0076229f8b7701bf13643e03768d91f8","sha512":"2c072a313c2c1eaed604454bfbfdaf2a8adc59cc23a65b99f8e6ebe5dc8623f7982560b6fbc7e6442cf59e869f10f3fe657bad6be5b4c6c5e3a2d25a3912149e","ssdeep":"768:fKyqe5a4UGSX6VOeZpmP38keRXafldax4Gvm7oZFq/ZnA6PbxioHsoSz+Fd92liJ:yyqcaS+Jqpmf8k2addq/vm7oZ0/ZA6PT","tlshash":"422301b995ea4692fccd1132652e932b80219f753954c4d6e6dec43c8987c18efabe0c","first_seen":"2026-05-03T09:25:58.462667Z","last_seen":"2026-08-09T21:23:30.76874Z","times_seen":40,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/Rectangle_Background_Gift-ZyELKzat.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.608Z","timestamp":1786100161608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/Rectangle_Background_Gift-ZyELKzat.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=S6ZDRs7uMB6ftusC; __ddg10_=1786100161; __ddg9_=162.158.222.88; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=RpdHMRG95dcxnKhS; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.30; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-c4ee\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99024\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrEHdaTnLUcrPriT0Na9Dt%2BqT6HFaglMB7C5n6PjLeD7kv4DsX%2FHPKvdWwOlyzJxwxOJVioiFPo%2BqWygQutxpi3ooriV9tuldgcdRFt1hP4gKk1fpBl8%2FETNxkaWRoFFUzsTmBG%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09a09565690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50414,"size_decoded":51511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5322f2e335d72f894f2fffce2673b8c3","sha1":"5cb9ccc9824632b194695771df6048155bca5ddc","sha256":"892cab16a807c849ed6e01970b026b8d4633aca9fcbddafb881ad0212b852623","sha512":"26722876414fe2076407681721183d38d0701318aa86e50ace33b64a28c2680b8fc35ab227e46213df07a419418dbaa48071c7aa40e260aa2cc9a31619a8e4bb","ssdeep":"1536:4a3cBVQTKS09xj2KirM37v+meJBJf1j0ru+jVq:NsvnS0XyKrvA/4C6q","tlshash":"8633023e1e6697bfddd10d107d43c5c14b28e7eeac8dc8cb912217894d22b2bbd28846","first_seen":"2026-05-03T09:25:58.41672Z","last_seen":"2026-08-09T21:23:30.717412Z","times_seen":39,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/favicon.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.784Z","timestamp":1786100161784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=RpdHMRG95dcxnKhS; __ddg10_=1786100161; __ddg9_=172.64.209.30; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=1re04rYA5IwDHKT4; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.46; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8193-6b81\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:23 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99026\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K12p4l6Z6T2r5l19normEfBnnvEHlbDEG%2FLoVaCZz2FzKh0a5IBVsWXx0yQseaR92Dc%2Fmz5iY4WjZQOKDIDwCmFMI3EGUd8KJtsogXTuRbWChOliiUzMkXM9%2FI%2BBOorTCbzN3YNx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a275c09b29675690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27521,"size_decoded":11873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57dd6243f25a6a327faee0f5d9e3a00c","sha1":"4f5bcc776bb696e35c18b9b56830d604ed200881","sha256":"d148c821c5534f0838aec73b74a3c9973bf4b32f4f34313de2edbffd5acd219f","sha512":"7a1873bf7d01341aa11a8d42da00fdef026c8d1f66143a0724613292ba736da7181b3cd927be7a9e2bf20471059aecee9738495c0f0deeaad712b71407ee59a5","ssdeep":"384:UgoG2IO0VyyrQcx9ipry1q9bU0CYKHE7zuk1PP1DnVdHupNH7TfSshpqzjNUq4ax:QHirQcKry2DKH7XfSsLujymcTiiaNn","tlshash":"91c274dd7b684df5e58ae3ebfb210099750ea4fa66c18b70c35c9e0934228acdd15c93","first_seen":"2026-05-03T09:25:58.438795Z","last_seen":"2026-08-09T21:23:30.733404Z","times_seen":40,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-new-year-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.121Z","timestamp":1786100162121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-new-year-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"1730e-19e1889dfa0\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K097f3mu7N%2B8hjMCZvXSnlnLHgoCHFthjtuXML9XToOVtt10YqrrDCCReWtslJtY2sazCTaQmFdwNoJ6mLGvko%2B%2B%2FWgnba8eGaNqrY2htRbA9z%2FEE1N05b3EkFSJ5sR%2F%2FrU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d3dc2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94990,"size_decoded":96424,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63fdbefceb85fa12b3fbe163536ba21","sha1":"1aa6d1ce85bed8959bce57748684be24725ddfd5","sha256":"372724c2ec10fcfc1068d6b19eb189f5f55a977ea9d7c559342e40282cf1d71e","sha512":"3a710b036de4629febd15903a03c98ca13002a4368cfa5246f7bd983b6269acfe02f20408d6eca115b29027ee60175dad8d0f78ced875fbeebaccb1addd5d528","ssdeep":"1536:VdFXCx/pEG1NBLws9R9tuQcpEkCTnWZf1Qs3D+y6yRCPXB9jCbNmDOmTCSedWViU:dXGqGNLws9P4QcpdCLWZNh3DP6bB9jg4","tlshash":"95931255ef9d5db1ef56df39a494213ffaf3247a8f980149904ca9d0a0018ef304d6ba","first_seen":"2026-07-08T18:54:53.805092Z","last_seen":"2026-08-09T21:23:30.762407Z","times_seen":46,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.126Z","timestamp":1786100162126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20olympx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"7606-19e87ec8ba7\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:26 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJkmiyufgPWERfCckFEfog%2FPVrhLKOtq0PKoRsooCNxYXPDkxJr2EjYrkbje58zCrpnTUN7AV6g%2F74OIAUgjdA2nRYvcyL8anP27TLTUXJm3X8YBaOJ1brC79mFWLxTW%2FhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dc8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30214,"size_decoded":31639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9514f4cf62ac519e1be2aa9c0c76aa36","sha1":"6e303bdd882e0a4b82139db82429a5282f6e303c","sha256":"d3ff28472bdabcf09e6429242c9320e819e993cbe0119c667e11a834235ae783","sha512":"65afd430152c1f5e3aa462ffff635e36653111d1d61b0c22d5675dd7eaab99583ad3392a2b7ad63daae10f448ede601aabb7603e041c61fd1c2e459fedc4627b","ssdeep":"768:PYAFoDRfzqaU0msv6kboS2FA+2DMAsKR5FucxI0c/liV:DFq+aYsSQoSH+2D5qcaj/","tlshash":"47d2f1c1a9326d244f05ee992bab0939d8c03e25b5452ccde23bcec6735d6f6837125e","first_seen":"2026-07-10T22:57:05.857918Z","last_seen":"2026-08-09T21:23:30.734093Z","times_seen":27,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/partners_field_background-Cy5LkgBv.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.225Z","timestamp":1786100161225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/partners_field_background-Cy5LkgBv.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=BHUHSf30NPQjYub8; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.163; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-2154\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xZHYD41fPONMFCkf3mTT1Y1UPlMEpyQRe0vJKs80UKeS0K%2BL4slzM3aJ%2FEo5rbHcz3is5%2FGtpvvBQuPjbiarEwyK7g0nwI0CO7BSqhIiiKQJEep%2B32l00jN5iXDFLmgfHstrLm9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275c097a91b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8532,"size_decoded":9628,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"462316c3b762e8320948d6c6d0cb1a8f","sha1":"4ba530927953610916ca35750ce1978180dfb104","sha256":"7c97483cc522c290425b2bb7a80e43f423a007795a5a9f63c755e0ac86695a07","sha512":"9207bab46fcb01051d83a4734086b1999ae395b947e52aa156d47a4182bbec744ec1d20f9e0e76209399c641327db538ca543f8f213222199abf847c1f475e8e","ssdeep":"192:lSwMaZhvjZyn22byC9YkLLELv9LtqdE4jFqmLgePXlA2D:Estz78Y/ptX4jFqmLg0D","tlshash":"7702bff09f6148bb1d722bbdd01eb429d0e20911b9a9b1f85b2f2a9f007c647355c6f0","first_seen":"2026-05-03T09:25:58.454531Z","last_seen":"2026-08-09T21:23:30.737122Z","times_seen":40,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/d-phone-DGLb5d2k.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.345Z","timestamp":1786100161345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/d-phone-DGLb5d2k.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=BjHoBuMQsYxpTSiZ; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.34; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-2dd3e\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXAh2GVnfjnEke4X79ZLEDgEDTNsANzFdxW%2Bw0rdfKWwylzrWfewWhUILeAlvTrfGAgikDK2GTcH2cAkiL4SKFzGJpAjcnEmsVJkapC%2F3J79iXdJFWhHNPczrHbG%2BWKaZhvs4jFR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09869375690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 187710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187710,"size_decoded":188805,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d025311454404cb7edb954d465b8c335","sha1":"67f9be9ae70f95220fab0371079bde6908ba7f17","sha256":"bce4690101bdbf5eac323bcd11b0a4f0d724bfeab82f639635b44d9ced378494","sha512":"9f870c3f00f40fdd5bba968201cb7f350cc63f2ae4ca5daf98180d3d6c6f7eb7c5f505c3948ae821223d4f1c1b7e6e7e685f430b1b3853179d9a798ffc5dbbec","ssdeep":"3072:dRXCVfXk9JGyJ/JggV5WFN+n4LG6LV/ATZAASe8TqbWiVv3CJmWx:TCVfsJfJxggV54+16LVoTuASe8+bJVvW","tlshash":"d204239e834a0eefd42fef82523686fef644b547cac1a8d689d18c0d19042a73567d54","first_seen":"2026-05-03T09:25:58.529961Z","last_seen":"2026-08-09T21:23:30.779437Z","times_seen":40,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/fortune-wheel/items","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.368Z","timestamp":1786100161368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/fortune-wheel/items HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"2e4-sff25hHekvz23YgNGT+WHtH94WQ\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4BJ%2BCKBOXs7VMgpJMHwaehvyEOwa%2FnPM%2BYAymA5URYFwGvBcMSZKDO70aDkQOfc4%2B0Cg28tipfvOikAwMj39TJCDxNTNCnoATmf2GhcdGlPiJStBapN0ftQpI0nPvdB%2FkE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0988cffb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":740,"size_decoded":1503,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1542203cde8d57fd871336cb9861c0fb","sha1":"b1f7f6e611de92fcf6dd880d193f961ed1fde164","sha256":"aeaf5e6636adf6e24900124f6a6713b8fdfe6e0fa6c17b1926b14e6311df9b5c","sha512":"99d64f0de3b76d1c2d00610682417299481a7d21a5eb84d8f0ca4c7ae1d231d6b2ce879a12f91e63de3b1b33193699f4c27b617c27b93ba19e09437c56fe0052","ssdeep":"","tlshash":"a0010a79387dc9bee011a8c9f8c289b5f1693146908d4e7415ddc43c67cd4d0b419f3a","first_seen":"2026-07-10T22:56:48.026435Z","last_seen":"2026-08-09T21:23:30.714717Z","times_seen":39,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10txbigbass.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.131Z","timestamp":1786100162131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs10txbigbass.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"9fe8-19e87ec0197\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:51 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvKOJwLjbxg1ZZVvGDwyNOoNKGLICmxi97LmDOLUNYvxyc%2FAn90%2Fdsu%2B%2FDee6opK2StnFeu2vMKnjgHX4eQy2WM33k4q6xGsKZArjPsr0X2OK5n%2BG%2B6SpHkivZ2Jr3cgRIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dccb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40936,"size_decoded":42367,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"46e5c64ee5f47133847efa0e29e91a95","sha1":"4a3f73b71e5e95c4b69f593027effa6285305190","sha256":"10c32076a837fc6ea356eb4d8fbb695e132ddd4a2b458b318e371a953b4c7701","sha512":"61f1fa630014cfb5032ae6a86ce1310a86f018e29368bcbbe0e460f5aeb621548364ddfd2cf74cd4eddd52b253ff85280381664f94d09ad0d54f31b0271282b0","ssdeep":"768:N/GALN5fNwrRiz067G5lYdKToKFMYAHb05jyDz+CWKGFcf0KejN:gALYiz067GvFdAAjyDz+C2B","tlshash":"e503f116339aae31d35b33f2ade05bd57b1a8590ead1a34c1cb30f7019bc48b29b4761","first_seen":"2026-07-10T22:56:48.098937Z","last_seen":"2026-08-09T21:23:30.734973Z","times_seen":40,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10firestrike2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.138Z","timestamp":1786100162138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs10firestrike2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"a402-19e87ebe137\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:43 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DV8ln4iZ0v89qOepm3kLQoQ7VhVUOhiseCbbEhIKKKJ8l7C%2FzyWh11JBdbZIrn%2Bn5PMhOzCvhxuE5g4xyrKdCPdorLhOgut1momdL55gVtF4tft%2BUyPiuj9wF1JTReuIO6o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d5dd2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41986,"size_decoded":43411,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"7c469b9fc23267de90000976fc025224","sha1":"cfb377359ab8dedf7cf8cfb06ce96d5217de1bd4","sha256":"5d6a9d29a39c65ea5052c2bcc60be88addb070b703e4623ef4016ac258c54cdd","sha512":"583657bed6754dd78c03cb50902b859b1b0b3235ee3edede73db247d3f34a604713ce74e287c06ffa5303e0b2088caaed1fd1aa058d40e77cd2826a6b779c45a","ssdeep":"768:cyxYznxPYzs/cIZWSbpufh6YGTVOmCdu98twVD0zK2eDWKp5icd:GznGI4SbpYsYGTVOmH9gDRPKu0","tlshash":"b113016b3ea9a0f0c59ffdf031fc8d6b9a54f83a511cae6d5572081785787e0806c72a","first_seen":"2026-07-10T22:56:48.090528Z","last_seen":"2026-08-09T21:23:30.722793Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/fonts/Proxima%20Nova%20Extrabold.ttf","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.271Z","timestamp":1786100161271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Extrabold.ttf HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/assets/index-LIP2OaeW.css\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=DX9IhjnwLNEELUeo; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.48; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8193-1f9a0\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:23 GMT\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKh%2BXKm%2BWOz%2BRlN4NYTdjGQnWQhbXCPiM0TDyBqXVoTkLAHbvn7lyt3CldO2em9BjFOGEUoNDna5LycLaROwrQXQ6mP%2F1JgsnyLhzpfWYy0YpoHTbaK%2BFIpENEwWVT63NpjsyZbk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a275c097e9235690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 129440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129440,"size_decoded":130502,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"ecce738438b07e0f2700c264633fc55b","sha1":"8d0e90e6a0f9dbe299f7f07c765df1626c1fdd20","sha256":"6cd9cca7999d5953f3c596cd7b4822d1a871a2d3b8b85823243ab1368a2234de","sha512":"5441a6b93c92e27fa185349be7289859eb7701537245b89ee5fd2bc221e46305bdbaf6024e7c9d8c11ea94a27f51036f5e0a76aad96335dfee7bb2f372c3c9a5","ssdeep":"3072:gcDXjxKwoaX0gLZOVKk/PoSR0Y5CURdoM2E8H7O1j7B3+gAyR1S:gxjVQSR0YjRWgS","tlshash":"33c34b43e383cf5edba999be9d31f3753616e67d6f6a330e63402079f50b2a8a050185","first_seen":"2026-04-14T01:08:26.757884Z","last_seen":"2026-08-09T21:23:30.748787Z","times_seen":45,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bg-slide-rolls-royce-DEuKrT2h.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.306Z","timestamp":1786100161306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bg-slide-rolls-royce-DEuKrT2h.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=GLapCfLvL0rLllvY; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.62; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-44ac8\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BoW%2FNKFh%2BJ8RTwNli1YvmuHYdgXaPyYNo%2FgHlVg6qnouYJE3E%2FbdKsD7gcJYNZCSaZvBK5oZQWL8SG1LMkUrrZIwtqPrKQixaVrXh1zfUOSnbS%2FtCUgh9rdYYIR47Gafd5ej37PX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09829295690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 281288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281288,"size_decoded":282389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d673eb3e0c4501683a08ad34bb1a5662","sha1":"d264f72535c24d5dadb6dfa43bd7a9cd11d8baa4","sha256":"e92cb9c066e132e79635910fae8265736749a928129d26cf5bf60bb5bf09ae0d","sha512":"5a730e07953aed75d2f3e1aa9c20137bc6f968662a0c65dd6d7f896b5b838f606439e8c43036dfb78237003b1448e823ec319b11520f6ced2f9572c9e721cba0","ssdeep":"6144:Avwm9g1xMmIoXAo1O7dXK0b7+adRSJrYwpCDlp:AYV/KD7dXK0b7aRm7","tlshash":"0c542396bfe8fbdec8576510c6eda331835035f9dc22d8429c09a7e976688f25e70423","first_seen":"2026-05-03T09:25:58.422158Z","last_seen":"2026-08-09T21:23:30.759422Z","times_seen":40,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/banner-3-v1-ipNYXXfR.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.316Z","timestamp":1786100161316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/banner-3-v1-ipNYXXfR.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Xma6q3ARkvwIzikT; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.66; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-16e98\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpF4a2NQEiwbr50R%2FIB0pLFyZDIqtiEU8f7a5c%2BFwutCzcu3dWmYITaj5KxIGrjAAR8aSqMn7eIPoHoGFBIeKQ2csT%2BKO5gFFDFPHgu5ZOSp8XfqH6H4fEnH%2BAjHTUnT1B9zCjC5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098392e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93848,"size_decoded":94944,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2bf969e3989b7a2f23632e486451c61","sha1":"be34f407e94c18e0e12f7da621f733d55fdc7d33","sha256":"3b2ab6d2d740b53452afb1f058afdec5dd78f57c119d5459226da07719c46f95","sha512":"c57c4fa8553ef3e9cef26774796023fded5120f7b001a637426b4a70a5cf3d502a89b8c1ee84c4a23846b70b5c4a57111fb61dabe778dfcab8d7963301a1750f","ssdeep":"1536:QBdqZZjPsttKG1QHTPPA7fjEO5XACYJFPyOjx3xp4KOrypj+r+1qM9hniJESk4sP:udhz1aTPPA7fjEO5wJ/6Ol3xROOpjY2T","tlshash":"019312f5e754c6749e89749ca56c3bae1a070737399613adf4a0fe8612e0776403f0ac","first_seen":"2026-05-03T09:25:58.446433Z","last_seen":"2026-08-09T21:23:30.699943Z","times_seen":40,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.118Z","timestamp":1786100162118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"13ea2-19e1889de90\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkqqQYSP%2BtGcn%2FTzvSjA7n08ulb7fK1D4GOCdlasThJRxIEaXqZ8WlQ2yjomKzyjLqHO4s1Hufz6kcIH8W2BPau0rC6yx3nWGTBL22mGdy%2FHdtmJknEg%2FMq4OtdwggJS1us%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d3dc0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81570,"size_decoded":82998,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bd31dc34709ab28154febf333c9d7b61","sha1":"957e8b303a3a7eac3058fbb67cc82c673569388c","sha256":"c4a2ab24afece8e542c58e54a15c9b5ba387d224aec670a881d89cfc49f63f8d","sha512":"e77dc104b82d541bfbc1dd6a5195a6a9f7bc24e32e4acb2764a0118427fba1bee9b07b4716d3f4228fff4205b447c79ca0e9ac5af12d18e6eac868af1ec8b9d5","ssdeep":"1536:XtLff+jHHoz3d9eMxKlXfg7N2OT0RyDxbH+pMEaJUIitksm:Xt0nUd9KXfg7NrmytgMhitkL","tlshash":"c28302daff75e12428a5d3a7a117770c421c9ef6e2bf2ee12c1a517a50efd84b812314","first_seen":"2026-05-03T09:25:58.558516Z","last_seen":"2026-08-09T21:23:30.752398Z","times_seen":45,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10254.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.151Z","timestamp":1786100162151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10254.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2ce72-19e87ead0a8\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:33 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H64l6Jiw7seh4UxiCouswp4DT70D%2Fw26GTWSNfwsvKYupMF3gZTWT0fM3WQYEPZFb1LDqMWk8dALGzKERxjanfntZy0c2umC%2FFU2oXOnHPMGnLuNjpMZKIgSLdlmWTLPd%2BQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d6dd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 183922\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183922,"size_decoded":185349,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58c70bf38ad794647038954715984aee","sha1":"11f1c3b541d8f13cf9131a8bbd3e08fb620a380a","sha256":"e4e586ede21eae7b159da44327517d538a5d72c19286d4f0fc2f96b6be111d48","sha512":"2d75fcb77aeec56049a23ac27fb5404a55dd44a68d301c4dbe5ed126cb2b0f99669718214a8304ea782c8764d67911c84afa6f97142aab056a15053ca442d753","ssdeep":"3072:qpMLoywjfeTiklVuS8CIVjC7LGB1aVdWYLAFDVVcAh86rTebeyP4hy5tqOzksq42:qpMLosljD8CQ1+YYsF4Ah8SQeyP4hy5a","tlshash":"08041233db5ae3e7c8e046780fbd57943ac631b6e6b2094546a056b629f12430376cef","first_seen":"2026-07-10T22:56:48.040221Z","last_seen":"2026-08-09T21:23:30.767353Z","times_seen":15,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10255.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.155Z","timestamp":1786100162155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10255.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"29dac-19e87ead218\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:33 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4NJ%2B7A6xbu6OcHtQuE0w0trMIXBWeclCawmUz%2B2XjoJDvyrweFIG7%2FfH%2FkA2PoTmeVgptvVs8aIgmkfYYhqQG8zWT%2Bt6elMWhHiHHldLIA4SVH%2FLx53kqbn2DtApoxoPxSQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d7ddbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 171436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171436,"size_decoded":172869,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b803a59a9233314789b9fa77931ab9e1","sha1":"a72aab7361dd58e0ec558ab22864b56596df939b","sha256":"a1625d1d0f487b80aceaca2dc62ce12d426b99a861ab246672fe61427dafa405","sha512":"9dd2454b34bb7d45a466476bc8a43dd6e476a6adcadc17a08e55cec3c9accd5638b778215f0fe44e54d26dc1358bae5afeed2aa49c19dffc2d9766ba01364e6c","ssdeep":"3072:mA1kScRWcCplzg4zDhauQ1/ZNEnoPUYGggJgjI9sR6y2+O0jjs2sYx5wVr8kzFi1:hkBWcCXEvxNEIUYZgJgjI+HslYvZ97np","tlshash":"49f312e75a93d38e713e3915b599e9b00e7096f44dc136c868acf98d0e62ec88dd1e48","first_seen":"2026-07-10T22:58:17.943384Z","last_seen":"2026-08-09T19:56:39.979072Z","times_seen":15,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/types","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.370Z","timestamp":1786100161370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/types HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"7c-wLSUnwguGGDmrEFWSodAo0H+MAw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKpYhMhfQ%2FQBfP87vXGF9vqZ1EPia8g%2FfGE7RpsD9Q9N%2BMeP36jSteM1KvruzlbNgWEBSNXnpfzYOjtoBrI2bpMUrh89r6rTY9H%2BfeiVTXZic5MfaQtfQFiuWSy91rkYOGk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0988d01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124,"size_decoded":1460,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d514a7a9901fd3746e8064956d9f5534","sha1":"c0b4949f082e1860e6ac41564a8740a341fe300c","sha256":"e348f489889bd113bc0384227bc6cad8d99551bcd06064135b37eda4a94ce679","sha512":"d5a5a4ff6e611b4b6e6d4133b83caa0aa1cd4350a1bef83878e48a8c5704339bde51236e7568fbd926e7cace30d1ca177c90cab989a842f6dec80acf8a763df9","ssdeep":"","tlshash":"28b0921114029db9aea0be8466c9b847b1d410a2c2592444e14cca3bc7ce76eb46aa1f","first_seen":"2026-07-25T23:02:50.523445Z","last_seen":"2026-08-09T21:23:30.726722Z","times_seen":16,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/mainpage","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.377Z","timestamp":1786100161377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/mainpage HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"100f1-JokHNe4G4AIFxHhbjpnm5UKmtb0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jLvLDZw30Jjfe2HZ7pQqa2W7u62uusNLhYBjr40tanEYPGXAZCxgqSBIRpmDuao8nqS7WWuyxDTxHexXeM%2Fbq15cUmo6aNAh%2FHSVf7MCiPYzH33%2BHcYws4ume8nHU07p0A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0989d07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65777,"size_decoded":6095,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66c01ae17df5a35ee9096c9ee1f9906b","sha1":"26890735ee06e00205c4785b8e99e6e542a6b5bd","sha256":"37c59d93f9bec19bcff358a0352fceca7b1fa65f911526b6fe4f7b0c0ef8d261","sha512":"3b529d442e05e8e026b2716c3e316e563c2df87bf124d6d8e00c68b1b2ddbcc2d2b0413d7acace0830d796112fc2a85fe40170a670efb5c4bd5cbf630512325e","ssdeep":"768:1LYPiPdw5vQZ27WmLPxmAgMCJgyCI2KVJIa8UQgeYjiPfXxDhNIgjM4IH5OYSWF1:evdNivt6kgNg","tlshash":"0653257e0bbd7c34e63142aac10e75d3b4c9f13fd884861cf3784925c5d99aa2a9e41e","first_seen":"2026-08-07T10:56:41.925833Z","last_seen":"2026-08-07T10:56:41.925833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.512Z","timestamp":1786100161512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://secured.tondrop.xyz/\r\nContent-Length: 227\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":227,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"domain\":\"secured.tondrop.xyz\",\"__path\":\"https://secured.tondrop.xyz/\",\"__title\":\"Secured: Most Popular Online Crypto Casino \u0026 Prediction Markets\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=tdHnYNlYkiGx6SDs; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg1_=IDnEghXEGHzC9HO0SqSx; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 07-Aug-2027 10:56:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCJh6kAAL%2FcQCj013%2BZHT%2FZH4mGyQD3P99q8wZWNdfKbITc2Dn7nX1ctCrtdC%2BkxOkRXdi3jz4NBBG8o537ZA8W2EtmqucpctDUCwDQtD%2Bxwqzb2PM37Wo%2FxU8zBsPCfCHUX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a275c09ab8080b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1202,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dfd27af97b0752dd454eecc1f7cbfcad","sha1":"7fccc6b5fcb13e4561b3bb92e7dd80f9a68bcea0","sha256":"03fe18464de3fe60eb4b60b43710636ce1b32c9c3fd50c81c1cd7957fe6f3ae7","sha512":"0e1efea102722701bc1eff3089c5991443810f109cfc06ac762cd9fbda8af61bc5c656878bd369c39a788c331225d586dbe57a405e52ecf838878c2eecc2f076","ssdeep":"","tlshash":"c5a01204e01810ae52791108083ae0306e666324e28182c4007441e444454c40118af0","first_seen":"2026-08-07T10:50:40.569107Z","last_seen":"2026-08-07T10:56:41.927561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/empty_wheel_of_fortune-BvFs0QoX.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.605Z","timestamp":1786100161605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/empty_wheel_of_fortune-BvFs0QoX.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=S6ZDRs7uMB6ftusC; __ddg10_=1786100161; __ddg9_=162.158.222.88; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=RakO2utsQy7iEAnE; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.213; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-224a8\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99024\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEw2refZqe7u6PGU83kiwJAdxpM1xi46euz6A%2FuuDLEs2QbRnK787T37E%2FG1UqBn1dDiXyw8ijpOc6WpLEKCPTSKHaAwrYZ3PTvqtoKc8G6W1IcD8Jq%2FltMW76rEMgRBCG%2FAs49E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09a09535690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 140456\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140456,"size_decoded":141555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bca8b0883192fe0acd03e5f1d93db7e","sha1":"9389b04455ce537ed80e128ed8425dcf18dc42ae","sha256":"886afe857a2b02c1774c0673a3efba566cc04819f7296ff500d0fbfbe390da0e","sha512":"7ede32a1b9c95e05a7390271377965482da6d53fc99e6417222270f1f279934518f80a0abd0846a99995c7a9b9aa5fc8bcbbbe2d9c65e5045737ae2045bd0a14","ssdeep":"3072:OX62yr3/9NDLA2YsrYJ3EuWHO4l+GhVbyPsrz3dshfPak6:6orPDvxBq3EuWu8+G3yPsN0fP","tlshash":"71d312801fbcde90cc6e291d983ee302d6676b4f19870918d9fcd5d6354b2e348a706e","first_seen":"2026-05-03T09:25:58.493685Z","last_seen":"2026-08-09T21:23:30.770165Z","times_seen":39,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/index-LIP2OaeW.css","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:00.239Z","timestamp":1786100160239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/index-LIP2OaeW.css HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=XcYGKGpSD1HVeyT1; __ddg10_=1786100159; __ddg9_=172.64.209.36; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=U5uivo9gNXaVqQbY; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\n__ddg10_=1786100160; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\n__ddg9_=162.158.222.11; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:00 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Fri, 07 Aug 2026 10:56:00 GMT\r\netag: W/\"6a5b8194-3b1dc\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZCvFuigAt3iWEzCB5YF7c7PWhp4NtVzsRlfMwrtO8u9PqJYxyRxgBIcgZbYv4wN%2FRlL36G1wNgeZhWSv3ICly6qM3BU%2BeE3bku%2BkXfFpi17hJjy7zZF%2BuZor7VQAZVJm7NmY9YaT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a275c09178de5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31789\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242140,"size_decoded":32932,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ff5c14982830226824475f0a65c8eec5","sha1":"963735f78b7f13cf1f4bcdf92536963067b8e88a","sha256":"54308e142c7bc10a7e43995500690f42876f47f648ac17eb52f489fe080fcecd","sha512":"d2e3f6619cae5346e8485d4ab80ce770f9ec06c6ba8ddb4ce926b36f011e30800e858522859459e0fb6912be4edee45436ebf641a242309a03168eb6691ecbc5","ssdeep":"6144:cAKCY1M98tcIrhAdT2Racpl8LD2Of9xZBnCz+RXYcKhROUfgf4r5uSL0XpkppTar:EiLwPVg","tlshash":"063490a4a275e53fbc37b0fd93acf80da109b195de260addb901612663d37f21c36a14","first_seen":"2026-07-25T23:02:50.473648Z","last_seen":"2026-08-09T21:23:30.712586Z","times_seen":16,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/support_field_background-BshW8QoL.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.223Z","timestamp":1786100161223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/support_field_background-BshW8QoL.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=j4XpAf7RllR5PB2o; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.24; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-2e6c\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNa7NcKMTBjkTEis1f9KbYnglGszadTpuiPoTRpANzypEOZJgdDcOMup%2BykN9h0qwWEdK6j48u%2BdXav6zkvi33CC8wlNxOiGgRAzTA4WzG7P2QMhYRb0HxezrGmx0wxMkUCYAZsd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275c097991a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11884,"size_decoded":12976,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"b51aad96d902ca506e02d9ad1e1f4dcd","sha1":"198a23d1aa7246db409bc4dc06544727daa44c78","sha256":"c7cf203481ad4dc3a93b0723608f5ad80e6da3af73a858ac2ce16ce37c35af8f","sha512":"f7178d64025d3c470b88310d14650f51fe29d7b7712ec192f7a0162ca0611d9ca001f94fb3dfe37d349099b9f01dbe75650a1ad9c7c438f4509c6f910628fe56","ssdeep":"192:lS+lvkmDNjAIekomrbNoibMKExB2smII2PchoP1lOkK+dHTMB27GknU/wDf:E+lvHjAYWibmqsq2USzOkvdzH6kn77","tlshash":"0332bfdb32f4b165197e4b8065f23017cc5e89b85fd4074c762b650e0676b1727b98d3","first_seen":"2026-05-03T09:25:58.56254Z","last_seen":"2026-08-09T21:23:30.77602Z","times_seen":40,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bg-slide-cashback-D6oBbvdR.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.311Z","timestamp":1786100161311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bg-slide-cashback-D6oBbvdR.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=BealKZUX1X0tbJFi; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.16; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-2ffb8\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9YzUOlEM5mBo4dRsgD6XCbZHA4MSoYRqR9Lmr1R8WEDDY9spJ3pMoXj%2Bety6z1oZIJwMOb5G0OfeEdf4WAWgZpWFE2wKZThr%2FaaDk5LTlMTO%2Fz0r7Wsm3Nk0u1fN5pBtHwV7CrB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098292b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 196536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196536,"size_decoded":197632,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"283f9e0b94c289cb3a4b5bf970bb03c3","sha1":"19a8fb7333d8a7da0df1823f78aafbaca731900b","sha256":"7ea986e91377afde7d9b0248eb296d0486a32c120acd17c296ba123d7b4810be","sha512":"d5b2f36aa7de7e6a8ec420ff99a6ca59a997644253e0ed5a7344351a64f6e420e269ca5dbfa4db3ca74e8e12fce8fd891b00a84b945772e20559d83df590c81f","ssdeep":"3072:khUIb5+3KIW/qMs3ABv6OqLnLWYx1cqh3mew0bighP6IwM8Bsaq4H2KX/IHepXx6:kqUqW/HMAZ6O8nLzx1cqhA0NFTaBsaqR","tlshash":"da14122839304449592569a81af9629630ccbe3da5b7ccbb0da7f3651b3b9f08c7570f","first_seen":"2026-05-03T09:25:58.432446Z","last_seen":"2026-08-09T21:23:30.743685Z","times_seen":40,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bitcoin-mljS7kJq.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.360Z","timestamp":1786100161360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bitcoin-mljS7kJq.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=w5oifpR8bTFzMVJ9; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.20; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-2238\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQEo4ODBnknpGiJEu5p5nFRVk831ZcV%2Fe5nHxgo6s53lAjloIr1Zob9W4tLSW%2BzkCxKV32A5WYb9zxvDPYrUnoPzS02gM5if4XQECEVWPO0%2BkARZeqsgbAfJhtYk%2BpXrp0EUs8tx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098793b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8760,"size_decoded":5124,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"710d57e714cad5fc98006574c6d725d7","sha1":"2bd571b41b7de877bc6d90b2dfd7fb5e6693402f","sha256":"13ec9cdc689bf43163ffb90f01fbe8f21fa52f8682df748a0a07d712a6d826cb","sha512":"65be74910f381df417e37ea166c8d7b489534e4b87cbfdc27677c26e491c23b4aa10fa1d35a611355e6d71d437e3c4f65d19cf821527e08de90943a46f5880e8","ssdeep":"192:Xw2tvul277dypCfZp6XozrP6wJ+Lc0rFvBD:Asx7ZfZp6fDLcAD","tlshash":"8202d8dd7bf456e0f842e3faca2340a6352334fa2691ca58c39ded45a6511ae4c59cc3","first_seen":"2026-05-03T09:25:58.573157Z","last_seen":"2026-08-09T21:23:30.749571Z","times_seen":40,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=secured.tondrop.xyz","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.376Z","timestamp":1786100161376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/domain-info?domain=secured.tondrop.xyz HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"3b-QqUqK7/8zbrChDR2IMmq1HttvMw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFYG276kiX7OzuwpUwCdRiCPXUhgAf9W0oVRtQNYylXlywUWWLZfo1NOO9z%2BtezzQ%2FFtmBw78vOkJbOVThqq7wro2%2ByQTLZqcB5UFx%2FLAOudv4WEJS53KolV%2F8Zw%2BolDHGI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0989d06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":1433,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a16566a886934f4b5a26af987de1baa0","sha1":"42a52a2bbffccdbac284347620c9aad47b6dbccc","sha256":"317167bd7cffc803bd3770dfddd055b1e03b52cf132e4a89ae7092819a84dfaa","sha512":"81fd0df554a1549e5e2d5f5c6ca09df0d7fcecc140a7a68623edada6d4a81201fe1d7a76bcb7e66d25df0db50da08345984a8942b7686f0aad84233f5f6a2c1b","ssdeep":"","tlshash":"e2a0020856422e2d0f514599399174302bdc66c388e51551445da65c9581571ec2557c","first_seen":"2026-05-03T09:25:58.4979Z","last_seen":"2026-08-09T21:23:30.702949Z","times_seen":19,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/20FS_image-CTw73Nm_.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.394Z","timestamp":1786100161394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/20FS_image-CTw73Nm_.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=dRg4Aw1y5q14mhw2; __ddg10_=1786100161; __ddg9_=172.64.209.58; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=FfQaCjvQ1qPvQut1; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.45; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-9f2b\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAyRDVhgIn%2BMs3aXqf%2FDFoyzM5hZLyldCMZ2fjVBXjcGd070ga1TG3VBD%2B1%2BKS6Iref4n8lLl80JqfDEFhTG9GbckbzRYh3L13jBtAOwth759ynNcmhZVfgfcJ2vagpyqKr1gef%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098b9445690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40747,"size_decoded":41845,"mime_type":"image/webp","magic":"PNG image data, 139 x 178, 8-bit/color RGBA, non-interlaced","md5":"97564493dca4d562ff94dc225815a45d","sha1":"d14dd698c42d2aab8e996cecf83924fe270c47ed","sha256":"6e7dc280727fb9557f78c8bc6accbe542ab96afe23ffa650abced9d7b433efde","sha512":"d9306172861ed71a7541d339c94e1ebd58462ee118a3e6ea68125d9b2fc44f0461851293f642f9e3868f8f13ed04774b94f562baf0cf053ab29e6d701b7fac68","ssdeep":"768:OttvaqnJ6/TQs4wWW2ycvTzibk+8ZpAC0O+I1d708WdQoJL6IqInZO039:+MAJ6ssJB2ysDP4SFDDo1Tnk039","tlshash":"3903f132856b11b3229d8e433b24674a8cffcf8337e0434866dcbf99654e9bd5e50046","first_seen":"2026-05-03T09:25:58.478441Z","last_seen":"2026-08-09T21:23:30.705346Z","times_seen":40,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10261.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.141Z","timestamp":1786100162141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10261.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"35b82-19e87ead6a8\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTjYdb4XhI9v%2BH9INiIOFie5%2FMN3js8WzZKQYFvItb42k3ebLUGtr1sNU8c2T1RZudyHspA3Zt36GQ9ameigtihZsip427tiqXl%2FVcuqAZzu7dM8ZLA4YcYPepqwsG7scgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d6dd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 220034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220034,"size_decoded":221461,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ade2baba71f79b75e4e2a52fae76f96","sha1":"39e74da651579b0872d0af6eadd7ec198ad2a6fb","sha256":"bb0785aa945fe9338b1bd94741abf0a6f8514822e7bf7bdfee3a7afc6a5dcf18","sha512":"4f226e4f92f4649b91edafd68cdb33e2c534e6563a103ae09b0f925180dbdb4582312eea11a97b17cf3310e16a3409b86a6dd081038c2566478623bae1793223","ssdeep":"6144:JUs/x8/x2mSCHIyG41+kuSxvAU50FNYTu8:qx2RCyupzk32","tlshash":"162413ec416f5312854a833bcf36a0376fad8b4d3599adb9ae0d56e135380f32842f59","first_seen":"2026-07-10T22:56:48.061653Z","last_seen":"2026-08-09T21:13:42.871369Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/wild-bounty-showdown.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.146Z","timestamp":1786100162146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/wild-bounty-showdown.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2bc72-19e9f36ee70\"\r\nlast-modified: Sat, 06 Jun 2026 23:13:57 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3KltC9D9c%2BJFg4AwMgLQsIVf6I3s%2FJn7Baj6Adwh%2B7%2F9Lr%2BzejMCF0BJpENhZ%2BZL%2FigM%2FbVoirtmMqZc5EZz6b0b90098JpJil3G0mTQEIc8nlHnkOwNMg0ydEIBFsgM1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d6dd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179314,"size_decoded":180751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3365e640a2b0f518547c1cc922353c78","sha1":"5661350ced325d532b25a4d27de835feb8d36651","sha256":"f000342620d26ff6bfeee957e130df0b2609fe1d15ca52bbe25a254224b37682","sha512":"cb605953f3589a0ce3ef693682e399a627bd562dc46d0b85f09efe3e28ebd179ff87c35e6a7d109863179da8e6c7f262ae4b2ee3721326593e400dc1877e60b4","ssdeep":"3072:QzxxGQpvyjYCvxROtascUIi9IG0LLVNhLCJFPoDlxbgh64kudgoRjXr9tk9gpD:QzHlpvyjh7MlInl/hEPoDlxbghp3moRj","tlshash":"ba0423d8bc0c7a4fe8cd707a7511069854e4871e3b2a27644b432fe49598f1e3fab05b","first_seen":"2026-07-10T22:56:48.08432Z","last_seen":"2026-08-09T21:23:30.76805Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/pwa-config?domain=secured.tondrop.xyz\u0026platform=web","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.047Z","timestamp":1786100161047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/pwa-config?domain=secured.tondrop.xyz\u0026platform=web HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"3b-QqUqK7/8zbrChDR2IMmq1HttvMw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rNuQVMf22NKl3S2gjFXDEIrbrlSb2i5piXciZ8bIllRCSOj9NXbn1jTarm26HIzJqHUXQzJUVJew8aytleGHVxh%2FXTpfdMZXBvuSg3hy5D87JZOuMtCpJuGmRXPoDX5Lx8o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a275c0971ce0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59,"size_decoded":1423,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a16566a886934f4b5a26af987de1baa0","sha1":"42a52a2bbffccdbac284347620c9aad47b6dbccc","sha256":"317167bd7cffc803bd3770dfddd055b1e03b52cf132e4a89ae7092819a84dfaa","sha512":"81fd0df554a1549e5e2d5f5c6ca09df0d7fcecc140a7a68623edada6d4a81201fe1d7a76bcb7e66d25df0db50da08345984a8942b7686f0aad84233f5f6a2c1b","ssdeep":"","tlshash":"e2a0020856422e2d0f514599399174302bdc66c388e51551445da65c9581571ec2557c","first_seen":"2026-05-03T09:25:58.4979Z","last_seen":"2026-08-09T21:23:30.702949Z","times_seen":19,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":0,"dns":71,"connect":16,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/fonts/Proxima%20Nova%20Extrabold.ttf","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.259Z","timestamp":1786100161259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Extrabold.ttf HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/assets/index-LIP2OaeW.css\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=nXiQZyhQB5HHW3IN; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.48; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8193-1f9a0\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:23 GMT\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FCa1uaCIb0T1N%2B0Sp3M%2BCvYZkFjJL1KgISGDbzphqOb2cZwZBLdXaj4uYZZFJ7fRfuuYrj5KBAiQf3OLXMfwVvPQ6XFwvdb0ltOgGuorv%2BKJK4%2FospPojxeT%2B03axYU6MsHD%2B7d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a275c097d91f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 129440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129440,"size_decoded":130506,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"ecce738438b07e0f2700c264633fc55b","sha1":"8d0e90e6a0f9dbe299f7f07c765df1626c1fdd20","sha256":"6cd9cca7999d5953f3c596cd7b4822d1a871a2d3b8b85823243ab1368a2234de","sha512":"5441a6b93c92e27fa185349be7289859eb7701537245b89ee5fd2bc221e46305bdbaf6024e7c9d8c11ea94a27f51036f5e0a76aad96335dfee7bb2f372c3c9a5","ssdeep":"3072:gcDXjxKwoaX0gLZOVKk/PoSR0Y5CURdoM2E8H7O1j7B3+gAyR1S:gxjVQSR0YjRWgS","tlshash":"33c34b43e383cf5edba999be9d31f3753616e67d6f6a330e63402079f50b2a8a050185","first_seen":"2026-04-14T01:08:26.757884Z","last_seen":"2026-08-09T21:23:30.748787Z","times_seen":45,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/fonts/Proxima%20Nova%20Semibold.ttf","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.270Z","timestamp":1786100161270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Semibold.ttf HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/assets/index-LIP2OaeW.css\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=E06B7TQvN9HNHqaI; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.239; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8193-1fec8\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:23 GMT\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UtzemZGPtDTlFFr56%2FcSBtXU%2FMuiWZb4suTtRv1zQiPfQkhmTUxcVZ%2BNEWa8442lIC9jcaF6HvXIOOPPa8KC8qStWq8OqkpLI5egqOUDJ16rUZw0awMfhJPFfkjxKq0vRkgL9Hfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a275c097e9225690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 130760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130760,"size_decoded":131820,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"3510e34fcc8e060e13e69a6e9272ba82","sha1":"76dd51cd14bacf7f8a4c3be19d58de6e4c55dd03","sha256":"c6588560d54a7b904bbc04ca47495e897dd6e9bce843d37757da566e5089cd63","sha512":"72754ace481a7bb50bdeb1545f53abd9846d217ac4a3c5e8a2d40dca5293c5db67efc99225d1f454d98960473388b4b82120d51529fb237028d2994674c9b08a","ssdeep":"3072:0HYa7NyOQIyhKsNBHcdGF/XmHuXo2E8H7O1j7B3+gAyR1K:0bcHPWHOcK","tlshash":"7ed38d4ff383dbffde55257eaab0f7b5325ae53c1a5d330daa445179e0190e8088068a","first_seen":"2024-02-19T16:27:02Z","last_seen":"2026-08-09T21:23:30.742919Z","times_seen":62,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/claim_reward_wheel_collapsed-DCJ6-LHa.png","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.299Z","timestamp":1786100161299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/claim_reward_wheel_collapsed-DCJ6-LHa.png HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=lmwSSfctSJGkNscM; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.32; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-61fe\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GNZ2Fmc1wljg6lVIDWTFD4hOUEFmbFwY%2FeI%2Fe8T3KjE1A9DzYNIdpagM68ojXVGYluwpDgM8VGYXgmm5lnDrcB1zwowFjFxvOdzznbwNfQpEYkCRpfFuTdev2IQk0GpF0QeNNR3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09819285690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25086,"size_decoded":26174,"mime_type":"image/png","magic":"PNG image data, 96 x 140, 8-bit/color RGBA, non-interlaced","md5":"4539bfb3316a00ac522555b8527489e5","sha1":"1757714da7a77745dacc4f718078807f91c01032","sha256":"07978d96aff53bc48fbed60e1b02cf013c1f9e016c257b2f2790adccc4c9fe8a","sha512":"30c8ee5b936bdf61ac6d1f0e89667c30c26f9bf06192da6adcc7495de43c510df15ad7471ddc970fffd36e9615e804d77817437ae6dedb0c064e8e7d84f8d7f2","ssdeep":"768:rCAhF2kP9gdDKwObqHKsJi/b2MlRCcGwQC+cdUH:m65YKjGHK0i/ednUUH","tlshash":"64b2e1ffe3ac48ea864c84575206b64bb4f617d38b0efc09dd11e83d98c934584b5ab9","first_seen":"2026-05-03T09:25:58.521087Z","last_seen":"2026-08-09T21:23:30.777433Z","times_seen":40,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bg-welcome-bonus-DO3wRMYx.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.314Z","timestamp":1786100161314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bg-welcome-bonus-DO3wRMYx.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=1LnOEBmKSxtdhnkp; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.66; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-19b12\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99026\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYe%2BiD5zGHxSy2tBBWibTBDwfku0Uz1efPTqDMIs3qYMJi6gi3kEESMrkh4ihoj3vBnjXg4BoM%2BtjZQqCR%2FbRSSN0HUqJ%2Fm6pFOOJSyqHnrnEoR03Ej0PZghscuSdlv7Ly6Dr7Bt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098392c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105234,"size_decoded":106332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e048450d38fd6aeb684e5e2ee45e0f58","sha1":"c7ab06791f125e5e2cde21fc2485711d69711a79","sha256":"9970dbc6e89f35d639c6315256e602c83cf8fca69d5947ac5a08af22ff44677a","sha512":"afaf8f8b950665d05b856f9569eef9704d446638cc843e0d1daa699791341cd18cdf7c5a6f3967be74b688c90436cf5d9c55946822062673876c44265ea3564b","ssdeep":"1536:FX3619GT3TK5L7S0HqZEwK4FtYvW/kwHPj3FIefGWG2C663P1yLcNp/VDja/5tzm:FCqunqZgzvWF73yeuWG2CP7rNDjIta","tlshash":"38a31294c945ec14f0a7f8644236ec007b913bbe92818c24b7f09b121b9559bed2af8f","first_seen":"2026-05-03T09:25:58.492722Z","last_seen":"2026-08-09T21:23:30.778772Z","times_seen":40,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/windows_image-D9HcJYU_.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.397Z","timestamp":1786100161397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/windows_image-D9HcJYU_.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=dRg4Aw1y5q14mhw2; __ddg10_=1786100161; __ddg9_=172.64.209.58; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=S6ZDRs7uMB6ftusC; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.88; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-7160\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99026\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjQNCXvkU5IqHr5VMXEMiQktJyKGyUZTdjlCDkBTVsmou9Xb0s%2FZvjEl2YOADDVoMyONQjs84TSHJcqsskED6geT8XHmiXr%2BvQwtLPvGIEWRRRCfUNyS4qrn6cfwdWFQ%2Bn4BCEYr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098b9465690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29024,"size_decoded":30118,"mime_type":"image/webp","magic":"PNG image data, 163 x 149, 8-bit/color RGBA, non-interlaced","md5":"749266b689ad7b0c9fdc4c43f9edda9f","sha1":"c7cddfc35c93bad203b4a046961e764c1368369c","sha256":"f15cb414f6facd1e665acf00fd7c4038655381954feb698d39b28fbcb98837ee","sha512":"9f8ec6f99e532aabae086f285199cd1db67a2c82301531b9efca3ba85332c68abe3cdc0cdb7a60abaeecef04c1cb197ac218ed7dfd15b121cef8f931b12d4f19","ssdeep":"768:ua5svhEeoLABwYYJxsrf3BbHWadRubuVq:PYOe4ABwZJxyfRzW4q","tlshash":"acd2d1402bc0b619a40b0fe12557e607cf732ffa5005eac091bd96e554a91baab2bfc1","first_seen":"2026-05-03T09:25:58.530823Z","last_seen":"2026-08-09T21:23:30.710725Z","times_seen":40,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.548Z","timestamp":1786100161548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://secured.tondrop.xyz/\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=rtx9JswLwzniTBzN; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg1_=vTuiIANuKRa3xeRUtPBU; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 07-Aug-2027 10:56:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opbFhd%2BdfSKreU%2FXYoAAegg93rcYTgjxgsGLV57gJRMt2FSn6snZQrZvGdi9tIS8mqkHTg3vq2WYATqI%2FE0d5QQleiJVCvDXZmh1eZLcn2mZiqrvQktWC0fn5eiAwvyHcpYp\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a275c099c8010b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1221,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mine-slot-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.104Z","timestamp":1786100162104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/mine-slot-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"1b448-19e188c4ea6\"\r\nlast-modified: Mon, 11 May 2026 19:38:28 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5fGoiFx0baeZ9dyzCfa2S45S4%2F86GKbZNwHa6%2FpN%2B%2FQrU2Fkd0CWQFSkGKZdcCF53rFdi2dBh4mjWvbRBuWKTbNI0CDDhRJXRb2XgLxQOpg48uqdEwgDikCGRtMzcMVS5s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d2db5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111688,"size_decoded":113117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7406dba4e1b62922d069c29462970e92","sha1":"2bb50a426fc171056758c2f1fe4da069bd317a55","sha256":"a1a7495aee2e2ec7e96d71aba77df32c181435df6daaf59f1f0dfbcbb1a89397","sha512":"f5624722848711d80f1d17db89bd6f160f8e8535f5c6e5b397925b686dea04c0239eca11ccbf753ffdc1e97d2c5006356d4ddeac83501b989309a8a3c62ed43f","ssdeep":"3072:PBZq2UAp8x3gncKwSfB6eC3QxHPq4Sh27r2neBIQWzUomhHVD:a9Ap8x3zS7CDt0PmeBIRt01D","tlshash":"04b31242f3751568dc6d93f93589eb067297838883476aa6ae233256d409470b78cbcf","first_seen":"2026-07-10T22:56:48.049907Z","last_seen":"2026-08-09T21:23:30.728198Z","times_seen":46,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/lights-C9uxKB0w.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.326Z","timestamp":1786100161326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/lights-C9uxKB0w.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=qHUryMHtClBCBlOb; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.74; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-75ac\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTmUmwsTlec0T94SSD6fPRLZ%2FxrwkJkTSswvuAC7g1c41vimmOZHznKkLOgZirTHJoBGVVIEQndK%2FugXYTMLEsueKOC%2FArmO7s09pnq3wqdX2dTzzNQP70ihtQN13rllfz8xb%2Fwz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09849325690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30124,"size_decoded":31219,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6dbbd736960c85aabcaab78addf1373a","sha1":"e1c8d638a5364520a04dbd8ab4cc9b7418cca633","sha256":"972f5988facc7d4afd4ca98f4e3667f8b80b0b0aca35a922dff754e4b50daae8","sha512":"4e75ab46d7f999a3fc4a742f4674707b6616b088557ef48ada62567ab723412c82c3395ca62d9e2748e5aff7c0146fba300225be3d2a467766704884c0227889","ssdeep":"768:Ylx4t1XGy37+jzkEcBSA8Qa1uYBKrj43dD961V5LscS:Gyt1XGY7+jzkEcBSVQjTrjeh6Vhk","tlshash":"02d2f1b122f3dc210c3ced43c1901d8968f96a2d628bc5790985abb247529a4e3277fd","first_seen":"2026-05-03T09:25:58.52188Z","last_seen":"2026-08-09T21:23:30.753707Z","times_seen":40,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/opened-present-CEvNLioh.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.343Z","timestamp":1786100161343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/opened-present-CEvNLioh.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=YRJXwCNW5Ex1zpte; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.74; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-3ff94\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FkDogYlYoQunzgJQOIfVx%2BOeifGTP1RUZHD3IU5vhHX6UWFEublkDZwepKgBBDSD9yirNKJAhO26ofznoLEtEffGxQNHUWyFMjTRwsVEBXwTjJcO2jm0iQSPzNyBnAycJnpdUiU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09859365690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262036,"size_decoded":263129,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d2baa6171c82004a7a67d102a54d218","sha1":"924dc4c0de181492fd2ba8333f0367370ec0bd9e","sha256":"a39bea34716d84ad0cbe1025dd76a63d40adec168c16e18d6d5f3ae57a00bbe4","sha512":"b7e536c3ad0a9df9ab921939a0ff28a7a8184edc08373430132151b9a436b50a876b400365144697523da6f81067295599c265ce8760912db4dda7229da1b009","ssdeep":"6144:UxE0KXqMTTrkKUHLn2w/D2M694CxdDxCddvtFGvBo:O2XqCTrzUrn2wTCxmFGvBo","tlshash":"464423d202c9c9da02833b21df18dc1a76622e96b3979840bd4ef5a3dfd93096253f65","first_seen":"2026-05-03T09:25:58.453632Z","last_seen":"2026-08-09T21:23:30.730424Z","times_seen":40,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.265Z","timestamp":1786100161265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:21:05 GMT\r\nexpires: Thu, 05 Aug 2027 13:21:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164096\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-08-10T03:14:31.324805Z","times_seen":873,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/cricket-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.111Z","timestamp":1786100162111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/cricket-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"28376-19e188a0797\"\r\nlast-modified: Mon, 11 May 2026 19:35:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGr2FjmTKBwtU6yf1TFoHGlcVEfMbQAHrLe0j4n%2BYOmiF%2BD4x9PtirGiI7TlFIKabjVt9RLRlzyr6rXy4vSKVKUYne8RJvVZrLaQ1oujoNLMJqdR%2BdLT29zvIn5FpPJ%2FQt4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d2dbbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164726,"size_decoded":166155,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1e1ba05a859bbbc01900d9ba08880e35","sha1":"7e9c385589952ab26f8f04deb098622c4310acb2","sha256":"aa6523b76b4bd7c120c494515236995d2583f085d9b9e73d96482b8d55064822","sha512":"394bf0f7f744e63a365f3c5e046e448924c15774bc15f4b435f27a3c4d3326a4a8cb6be51926504ef11006f0238802623e1c40b39a0c91b612cfc657bbec9914","ssdeep":"3072:yHEh/mHTKsEg0Y12Wuo0DNXO3m6IMgNiMSBTJWvRiH8wJzudjsuyoB0VFvqBZ0AJ:ykaTKsppSDN1mgc7Mp/kudjf2yfd","tlshash":"5af3129f461a6f92e6026c204b86cb7d63e4c4314c597d6738a8687c341afd2897b7f8","first_seen":"2026-05-03T09:25:58.532508Z","last_seen":"2026-08-09T21:23:30.748024Z","times_seen":47,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-vegas-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.112Z","timestamp":1786100162112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-vegas-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"1d4ff-19e1889e1c4\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0s7X%2BWYtnSU2S%2FQVjptiNKheCmSZ0WeowXaYutDDlL8MvPA5vXbDRgSzPwZRi4fThf%2FCPrWWr98AMwfzxUnKlieLvCiTQCpGRmPhByDvE8gAVsn%2FOVOYD9K5qHEMRwhEuA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d2dbcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120063,"size_decoded":121492,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d97c882f1efb1cb1a0602a1409eae227","sha1":"fed1caf3f89fb7c82227e37bd3159eeca20d05d8","sha256":"5a11d7cc3d0dcb1cdc5b76a698c907e6c85bee99c68ec743af24df813e67fa29","sha512":"c5cdd38a27bdf7e64929d9dc9092c4fe80b96a1bdd38f865aa1e9db9c207a34e2daf50c46aea9ada68011e8264e5da1a3ff18bc7573f1249e3b1cc0789d32080","ssdeep":"1536:w4cNnWnyYHZDR+gQngdgg768GBAqx4v6QI0ZbVZY4EamRVW63QTnwHe6mp3ZyNlO:oEJHZDR+gasY8ZYNaD6WwHHNo1","tlshash":"e8c312e970881bf8d381ea1ffa06ec26027a87c97fd32cb882486cbc4554e5dfc55161","first_seen":"2026-05-03T09:25:58.487822Z","last_seen":"2026-08-09T21:23:30.773769Z","times_seen":46,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlight.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.125Z","timestamp":1786100162125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20starlight.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"8a02-19e87eca807\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86P9N0ME90FROV51z1%2FEJ%2FRbtNA1J12QZOoxU3sg0nFcgdgz819MXogkYOtB0FB4oFrj4cdJarDbOW2CXAWxH%2BaSWmA0d02LB209cH48ClmpffIf1Q9VI%2F3Bt35DdrF55XE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dc7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35330,"size_decoded":36757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb70ba24f84087137f07fd3cf86867e2","sha1":"6386b0c6ba2cb19855f820832bd93519e0681bd0","sha256":"779f8d03af2585cdd3584a77c86785ffbe20b691ee740d604aa92bf33abc2c89","sha512":"22cf4a6685a034663d99dc36632d8b1013cebcaa19ea5f6cfa3ff3a3b4851bf3ef6bea86a8768af559b15fcf6456cb630f39258d5042639ccd814affd0d6d0f0","ssdeep":"768:YW2SZkHXcFP2HKuzbO3poGubgpsP08oOFSGIw2rMO/7F/fceme:LZiXcFeJY1u8AoNGIw21DF/f7","tlshash":"51f2f1d48b4ca3d1ac94212e5e1f943232cbd78646ae4e90412b63907f2cb67673b9c7","first_seen":"2026-07-10T22:56:48.046937Z","last_seen":"2026-08-09T20:13:23.787192Z","times_seen":34,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympgate.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.129Z","timestamp":1786100162129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20olympgate.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"6cae-19e87ec872f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:25 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8Enmw4C8fUQ4ZOnQQ4zDU88Sc72GyL13QLI5ElRHz0uAhvK63YRgNyVvttGQg%2FSAfT%2B%2FOZJb2uAxqJm8d8TZ%2Ffg%2BxFGna15nz2bVztFD5nAnuWhE45YkjFxLmUazKmGVew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dcab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27822,"size_decoded":29251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67a9f14667062ed7354e711966e13f6f","sha1":"df69b5e3720f0d72981cea8b6b242ae18a9087c8","sha256":"8fc1a0ae668b1bcfadd45af5b0c9184a82c16e186ee88db6b014cd58e893950c","sha512":"5740b95c0ddab506d7eecaf3d558766255036bbe35f15623dd226d1a6fc71e97c0103b8045436c8c50266a0ea7251f7ed92dbe9da176fdee6cda78ffd6ab5066","ssdeep":"768:rSI0kwqIQwzv8jgHqYBpvaphCvCV5wDH3bF:J/wZHTVvCVWDXb","tlshash":"fdc2e131f92236dacb45f3f584d1c7c0123f1191589e2316ae9921b5e2f87ea7c5239e","first_seen":"2026-07-10T22:56:48.1Z","last_seen":"2026-08-09T21:23:30.771569Z","times_seen":35,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fredoka:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:00.235Z","timestamp":1786100160235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Fredoka:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 07 Aug 2026 10:56:00 GMT\r\ndate: Fri, 07 Aug 2026 10:56:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3780,"size_decoded":1186,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dff37f530356962f9042a52f2e2d9e04","sha1":"4a10361ecd34c94ddaec3f82bd97736306878225","sha256":"b4bd5c6a85689354d43184dcec1d502ad4b5627d7b2b177f5ab6b11df20c3c6a","sha512":"09ec8fe6a71b99c8c4f58bcf6b04f162be9e6a0f75ee30c664e20af5e461a300daf3f90a10ec7789eec52ac8ee2afedda821dac8c5ab74eff65bebc118263aba","ssdeep":"","tlshash":"3171cd91041f5184eb835dd163da7e36ee0f60516818d4669bfd18e8bcead72831271d","first_seen":"2026-05-03T09:25:58.421196Z","last_seen":"2026-08-09T21:23:30.71167Z","times_seen":43,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.267Z","timestamp":1786100161267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:21:05 GMT\r\nexpires: Thu, 05 Aug 2027 13:21:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164096\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-08-10T03:14:31.324805Z","times_seen":873,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":21,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/werder_bremen-06cJMe_2.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.382Z","timestamp":1786100161382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/werder_bremen-06cJMe_2.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=BHUHSf30NPQjYub8; __ddg10_=1786100161; __ddg9_=162.158.222.163; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=4jLnegH3DvKtIpdD; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.78; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-2c57\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xm%2BWgcqcQEDgL4VdEmOaJigj31WHFcrCKYVadzSN9JZgaYlfScC49GUOxS51pbijTkkl2bYCNbCZR0%2B%2BvUuZSTEdozZNQLmO2VhC5WBYNxzdz10XytI5rqatdN685nmEtlal4B7y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09899405690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11351,"size_decoded":5202,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9bf3a09c5db8178ee8262acb3bb930a4","sha1":"5032a3c1f0f3f784ce17f6b8370540e5c2891d7a","sha256":"4c5c02448915860d44a50f469bee4fb82dcb088732b31453fe094e85dcc2070b","sha512":"52ce5d3074909e7460d144c21b3fb496c10ee6c09efd602e1ea52f205daea3e11752627e45c889c23a26a08f2a580729acbe0687555344b4311a861f37e991cd","ssdeep":"192:W/uehQxb9c9qniNEgj9pZh9nTd0f6WYsFL2PcxX7NBZl447mGRtejVZ:WWTeHNZ999nTezYsREcxX7fF7mGyjVZ","tlshash":"3f3240cde7ee82ecb04357f99a611cb4291b05f52740cee9c7b71a11eca246e8c31883","first_seen":"2026-05-03T09:25:58.568484Z","last_seen":"2026-08-09T21:23:30.719752Z","times_seen":40,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/crypto_gambling_foundation-BbxkjRu0.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.383Z","timestamp":1786100161383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/crypto_gambling_foundation-BbxkjRu0.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=BHUHSf30NPQjYub8; __ddg10_=1786100161; __ddg9_=162.158.222.163; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=KVMaxVleU0LD0Ia7; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.85; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-89fc\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gY1cGYYtkM1mXt%2BhypAtgRsjxk45msAh8wYlifhmUdYw%2Fqwm524Ooo0E5tPl%2BSvppF9qDTJN9UF0MwdLjpHa2OsxKBYIRz%2Fa0B6abSr7lXZGcm92GZKhF2RdyEyPpxzovTJBc4X3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09899415690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":15506,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ff6e9ffc2b4de36bea9c02f407fe588","sha1":"73f4d8b48155cd22dd74bff2100d178f73062451","sha256":"7b94606480b18209752427b8347bee08f39aabfc57c8ac3dc1fee4edb94761af","sha512":"362eeff5f4bd054e1c6770bb4902689d8a4c943c1060abe2eba5817376864df31eafce85042c66fc57c7a17b30e5627a93e0771aa7edd5bb4ce238a5dc8edb99","ssdeep":"768:Jq2EK4povVWRgXI4NRoiiD7h+MiyF36A9n9NXCm5f9nWFJq:I/Jz2VzoNDsOFKIn3Xjf95","tlshash":"bff2b4d837f6a3f8f000f7f5572650747e4624f67b62c978c3b65e98e54a44d8ca8890","first_seen":"2026-05-03T09:25:58.490776Z","last_seen":"2026-08-09T21:23:30.72038Z","times_seen":40,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rabbit-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.102Z","timestamp":1786100162102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/rabbit-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"266bb-19e188cb63e\"\r\nlast-modified: Mon, 11 May 2026 19:38:55 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihKTEJpnwnrRhfAiah4KK0tgow2V01YreSyMyRRiUIb%2B%2B4u%2B%2B9NztVlLIzKTmj0o1CuBCdGYo84Ou8GSXI3oOVaDyH68uGwqUDXn89c78FEUvXsW2Lbb9X6VQrAcIMzXLTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d1db3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157371,"size_decoded":158800,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"350386f4ae53bc8b1e470dbc414eb3a6","sha1":"d1d4472c746f237c379d64794389971df62dbeb9","sha256":"974fa37657af78ae7f1695c622ad77f544cc19dd6c3bb29502ba7e6f4b5c48c1","sha512":"7ee319101357aa4bbe8e6c0eda5ca456d062d8fe15a6298e01066491c36ba25b534266b8ec19f2ba1dfbcc657df1b0c849ca65c57767743ff21269550e04144f","ssdeep":"3072:n3qGl6Cx84WbG3geXr6LfjDcjjeZa0V89C/gblDXNOVR7E:n35lkYDXQrYjC9AxblQ+","tlshash":"6ef312530d7981eb4b9bf6e3b9040aa01c026b4d37d183bbe79deec869d58bd08c5305","first_seen":"2026-05-03T09:25:58.450756Z","last_seen":"2026-08-09T21:23:30.751122Z","times_seen":46,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vswaysbufking.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.134Z","timestamp":1786100162134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vswaysbufking.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"8da8-19e87ed45b7\"\r\nlast-modified: Tue, 02 Jun 2026 10:42:14 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpqXAs5PUOQ5uj1Ju%2Fx%2BKwNMAw%2F2Ljm9D3eU1ahoaeg5nsVADA88fM9olxMtN9K5VMpIQEex49dW1DVQz6RAR2ek%2BbSMsI8P12m1oiC2t0rm6fSDHHPYKQDViTErau2Lzfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d5dd1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36264,"size_decoded":37691,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b3d75d1af87c9ad72794038faaae824","sha1":"ffeded66b540d06ebda245980fd5ee5a8195fd5c","sha256":"c386fae87b67d197f492e6d56c1b3fcb7a2f2e6d1f619011b32844402945ad86","sha512":"6a04934a80321de1f685b065c772ea9bda511eb8b4398e8d9b609afbb4dc438c250151150bc1a40ba49580dacf6c2d964154ca5ce55f8a9ada498db11a50039d","ssdeep":"768:LNZEgovkb7mJXzOHZTPWlZJi1RqNIMfiGxETNWAwRxb:BZEtcm5zOwZJfNIMtxETNN8xb","tlshash":"fcf2f1d89e75f4e3b70af86785ec00b5d0867ef7dd1656b0dc4fa2623492927b248d08","first_seen":"2026-07-10T22:57:05.875896Z","last_seen":"2026-08-09T20:03:01.722441Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bg-slide-lucky-wheel-Ddw8ZQMc.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.308Z","timestamp":1786100161308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bg-slide-lucky-wheel-Ddw8ZQMc.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=VitkTIfbmr3G0kGc; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.24; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-f502\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xXPMSM2YsYQViEOmhZp8piYooitY%2Fx1gmcs3%2BOIj%2BF%2FISArLGN96XDcJQRSDFFdLsda6BFdi76%2Fg%2FQInEb6v9ygSfylmr7AORB12rJRWjsEdsezQvryUVgMWLQRcrMLo9SMvk%2FW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098292a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62722,"size_decoded":63823,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc04477806c1dcf00c7fad09ef68ff6b","sha1":"a48f3c2bd9829cf44e29eee46cd0eb55cb21f8cc","sha256":"18babb47c1c193d5440fd86038f0f465e1c26a0c47ed853ccd21e925e69f0764","sha512":"4037b9a74e29e022472e446de1a26bccb5d575bfc06055aa3e3d5dd72e42a69992d7aca6411ada5a240e28e4a0fa58bfab2fb18b90e1c71e54f3ba75eab77f8e","ssdeep":"1536:vpeEBohdydYJtVmLGf4bCSq9Fu6zqh19olG+Afh4FNdPumI:vpe6udhbTf4WFvzYAlwJ2N1I","tlshash":"c75302c1518b3857f38b2176671ffb434217c2a357b092b317723ebd0d28a76272a852","first_seen":"2026-05-03T09:25:58.510307Z","last_seen":"2026-08-09T21:23:30.778119Z","times_seen":40,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/d-zues-Brs_uoRm.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.322Z","timestamp":1786100161322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/d-zues-Brs_uoRm.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=9deJZ5Cc9wxKfPGg; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.74; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-27c46\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9h%2Bg8z1Y7yFOZz2HjEpkwO4ybtvzK7p2qir4yDm1wHIXpyJzfT2alfj5qBwXJWfNVoDysk2QszO8bKmh9%2Fk5qN8ShnI2yf%2Fh74drLChIG7frADsYAKpu7St2pkyi6W66fEGPNso\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09839315690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162886,"size_decoded":163982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"962bf5d8512b7941a01d57d32c49a3d2","sha1":"a52ed0616ff5073be1ccb5e63f56370aa0fd41ef","sha256":"2f69cb9f94d8c95c0ee6b9d33e6eeef64dc9ae4886ed4e8156506beb08475772","sha512":"35bfb0970c65146fc012369afdf61ee8aa33921d93fe97b880eb5a69beb592a0b4179fc6364397bb49ae0d7607ab4a9b5155954476abf45de47e512a43f545ef","ssdeep":"3072:ehuoS+qVEXcaY++mTvYE97Mfi59mbSF2wYHfhDLfR5TlaaGKlNllOurZNW1rGeT3:cuoYHP+JvYQ7RQFXfRh3lNfrZNW16eT3","tlshash":"4bf32239226af794b0f59ff6569826c411444c0f0fc1da9079b6f383627cb6eca86762","first_seen":"2026-05-03T09:25:58.529097Z","last_seen":"2026-08-09T21:23:30.755997Z","times_seen":40,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/mobile_install-B-NhXZqn.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.346Z","timestamp":1786100161346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/mobile_install-B-NhXZqn.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=R6wBrj7qPPWZ6nx9; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.22; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-23c92\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,HIT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYWFVoOqsmeJoDJELIPyiZxDbGezoWjQ%2F3rYmcp2juRP9cy6hWOKDwd8yRH6wGs8gaXYSHJrgTVl3sWVh3mzYoG6e83LcIBhARVfK35vdr%2Br9lv7msNJc5XGmpwNMYFPR6x2QKmb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09869385690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146578,"size_decoded":147670,"mime_type":"image/webp","magic":"PNG image data, 459 x 404, 8-bit/color RGBA, non-interlaced","md5":"5e7f065a53f00254f8f353e77492d523","sha1":"cc3d0bfbc1d66bbc34de5e24171f3c2400b05628","sha256":"81a0851c2d7776b76bf69fea2d6b16d3f12573a2d1cab6b5b4160401cb3abf05","sha512":"e6cb5e7b536aedf6018cf9bda85a78a98ce838cdbefcdebadf0ff7adc128df57026c3705ad090f0a84c6f4c75b10dcd1441e00f6669f8d891cccfaa9f0760c0a","ssdeep":"3072:3UUFZi23IObq7HRyhS0nfQ7YTG+adi8GU3xqKLymtWxUBvtwsuJ:EUFZdbe7HRP0fQ7Y6+aY8GEb3tWeBlwJ","tlshash":"c7e3128e9886c800a21f5d67e6b5f26d5cecc2d7c5cf53fc111562934ae2ab2042f22f","first_seen":"2026-05-03T09:25:58.511186Z","last_seen":"2026-08-09T21:23:30.725084Z","times_seen":40,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/tron-BZApJ2eW.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.365Z","timestamp":1786100161365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/tron-BZApJ2eW.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=lQ1XLIrwfZNTZW84; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.55; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-271b\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdNMGJ2pTkhl6DjFVEB6UswDa7rzdMD57rvfCMmWBL0cXSkCBrCfqhFgGyxlP6%2FO70uT9RYHWS%2FtPiAW0tU0hBQvoZqL45r%2FOq9%2FAn0QlHbAFNOwzD6f9gZ%2FBCp4zp0aV7xF63Io\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098893e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10011,"size_decoded":5315,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6240b2bcb50d109a6e30c90d5b4c4a2b","sha1":"b9ac50ac536b859bff64ac6f811726ab0b189698","sha256":"209fa71e5bed05604e1c6aaf5e49788ac77a338aee22c651c69f0221677ef501","sha512":"8f301595be83c08f9b4462ab8d562e832ae4f7d6c7b61622a369badd44afbb3a101f26a6b4a7861b7b49c493e95b43326b8f2126c5dfe99565d99bfc5c1635f4","ssdeep":"192:71jYen8OoOMx9CQk+PMnqIRcgqxv8qqQX0:hjC0+PMZRqxHqQX0","tlshash":"5222c5ce67f5a9f0f006f7d9ca620479311b68f93a02ce5bc7e90d89a11185ed586ccb","first_seen":"2026-05-03T09:25:58.539074Z","last_seen":"2026-08-09T21:23:30.715657Z","times_seen":40,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/cryptocom-CL7Ghwue.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.366Z","timestamp":1786100161366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/cryptocom-CL7Ghwue.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=HDGaVipBaWtgtOWN; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.105; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-145c\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GM07A2QaHPdYGrU9Fia6v0j9c1xDFv6hvXKpjMNfRAc8slnGtJOZoFF2o1O4MgZbUTcwMdsTyiwRcD7q6hpRqb3YkxhJua8nEsC%2BBAYk3GjOseGE8CVkwNWv9U9lcQqTvYKYKII2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098893f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5212,"size_decoded":2925,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d1d09fd759918c16c030d9ad3ab8311","sha1":"17a6f1877ff138cf956339c93992f62663d5d207","sha256":"932a9f99e97842571bf490bacbd702458458bd3855e2fe1881b57903b1dd2ca6","sha512":"118907e69bf418432854f04fafb3e17b6bb8a8d90fc4c8fb2d1c404c9837eb538c8fcdc5ee730a685fd13e064dc99be61dca02b1b7752b43737a204e1745f496","ssdeep":"96:wlgiEHU5ZkKmDhVpQino3ZyKxD7pJrtHw0oxeq4iKh:wTAfDPCimEK17ph1a4Xh","tlshash":"aeb113eaa76488e1d84693fedf3d16ea337228bd3932c45963d16e22685117e884ddc0","first_seen":"2026-05-03T09:25:58.435924Z","last_seen":"2026-08-09T21:23:30.731518Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/windows_background-CyRveNgh.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.396Z","timestamp":1786100161396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/windows_background-CyRveNgh.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=dRg4Aw1y5q14mhw2; __ddg10_=1786100161; __ddg9_=172.64.209.58; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=gJ89K2WojEXGG4Ix; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.48; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-11611\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXRSAfIqwqQV0YjI0b3fJsUssCEJwhPg8K3bUbwcAYwvqwIFIcSGp5kRwEVi8T0ynYxDgNaC3yT%2BpIh6TmBNYmzASyxUM%2FsbPd0BPzum%2BwP%2Bt%2FJOKdwgjYSpBrQVHrc0qWJrgtnw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098b9455690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71185\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71185,"size_decoded":72283,"mime_type":"image/webp","magic":"PNG image data, 326 x 160, 8-bit/color RGBA, non-interlaced","md5":"82bb540992a750317b3f811fe5f8a761","sha1":"724bd5f3d37c959ad5bb5235c1f143d2af0b8b10","sha256":"93c89ce498d0655b3ec3546b01a0b3e59976446d12f3939d0bd55a23245e1ac3","sha512":"7162a533b60c87697170d7c1dfc22f26753017c2f699eb70b3e1b16cd282f744aea860a3663961388ab8ab98d7350b31bed6a3acc3c0e194982053a04f5824e8","ssdeep":"1536:M6nr21FPjz4vX3ieDxu+yCmiKFcNnz/2S+Nf5W7CyhfoNA42rO2sDZI:D2PQxb8FcNz/INfIGSf14gO2+e","tlshash":"896302ea4927e19edd8b96665fc408d5bc88221869f8a82031a419cf39b37f54bd04df","first_seen":"2026-05-03T09:25:58.441812Z","last_seen":"2026-08-09T21:23:30.769478Z","times_seen":40,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/pointer_fortune-CJvMtp0k.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.606Z","timestamp":1786100161606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/pointer_fortune-CJvMtp0k.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=S6ZDRs7uMB6ftusC; __ddg10_=1786100161; __ddg9_=162.158.222.88; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=2nrS7KtEvf6AT6Rg; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.64; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-7c1e\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99024\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axQdA28d%2FkB8kVdWzIYwB%2FDEMEz%2FSfF520eeEtD2AOUA7BrDZOMOVVy8dZ4L4QsbumESnixrFvRKLS%2BlxL7WnycLoHw9q68OXN4FLXS79fVKuvIzkcc%2BCi%2FCXYKQnX%2BOE2w%2BYYI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09a09545690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31774,"size_decoded":32878,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5302d2103c23bfc66c9cefd300756894","sha1":"cce84d556eb0b50dd1e46532aeba8aa439315124","sha256":"91d3c91514f1f30318b480c97859d30901f65c68177ece573f03b43af95dfb7f","sha512":"dfb93be69e6013bb6bfab81126097c326d6eb99b98c1ac39608e8731196e1a1d69540b3d2f20ac36fac17cd98821a1a22242afdb90282ac204ac4746268caf28","ssdeep":"768:8o4SzAzcgr7Os5a2TB4i/KqNZ1dvRQqPk7r60mVJ5JZUO:81aAYYy2afiNZtQqPkHmVJ","tlshash":"70e2f2c62782d68a269fd625e902f777b0f427b4940421875db1c89cb3bed2d6e5c888","first_seen":"2026-05-03T09:25:58.45599Z","last_seen":"2026-08-09T21:23:30.73265Z","times_seen":39,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-vs-zombies-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.122Z","timestamp":1786100162122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-vs-zombies-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"49ec-19e1889e2b0\"\r\nlast-modified: Mon, 11 May 2026 19:35:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWCOSn9%2FJ9%2F7RYMOGf%2FixQf94bRovd%2FInBoHqJDqtngSm96mdLVUO8Bcu0Zy8APhhiPtth9fHcbx75johSpgbtYNCiK%2FHOipQt18tclR8c6vD9f5papaYB%2FDlbr2QTNyn9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dc3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18924,"size_decoded":20355,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c496079d347b741f8a61c9ff13e5f25","sha1":"d34e547f81a344f52f32078078090b0e6dd0c549","sha256":"6b61c65973ee02deb325d6cb91f24c3201e376b4fbb3bd25c7dbb14ebe1b28b7","sha512":"a1030c0c003398488e2b35d4e0777a0f7de2936831b2ab3fe0f21d64290e84db39fd293b0ea1f8a0ecc35e99e0e7c927d8699f0cec504219d226e1c13464f488","ssdeep":"384:zGjo/RN/ZF6TOfWpzF86HGv3QVv/bOwvJ9WHV82zghRHl3Kb7+q:zGcZVZZfy587vYvyw3S82u3KF","tlshash":"ee82d1e92fa5f094e296772451135350523390a01d40de8bfdf9e27f2932e509caefad","first_seen":"2026-07-10T22:56:48.11117Z","last_seen":"2026-08-09T21:23:30.750384Z","times_seen":43,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/stuffs-DiuQsYY8.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.219Z","timestamp":1786100161219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/stuffs-DiuQsYY8.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=sYwmSE7Da8lsQerP; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.14; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-7cd4\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxnkQJU0bxkaIrZe14ZmlW5JzU4PfqNaqfujkPI2U3Y1ZenU%2F8VBsDiwlgvxVyDpWZQFENrPbj%2F8DS5WipQHMLp9TKUQvxVpIf6hDpL8iFhGSS0RnxohAGmBu2McL5HIg8oC1SWu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275c09799195690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31956,"size_decoded":33047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f28aee87221a0188368df4771f80ef49","sha1":"45ae42fae9ad8621f08cd4e5ccb4ecadf3343bf7","sha256":"96e99af8af3baa3249a28c2850442e8481b73a7fcb99aca9ef796ad6721c1569","sha512":"470bd2489a9aa993c6051841e95bc7ff88fe952fdf8cf97e8369fe3a406eece4a4ebb24186be403fa046c2f244dda766bb9382384e47c6e7ef9b3e1e0fd5ffb8","ssdeep":"768:YMyqtRHhc2ORBGSTZS/7FZDBHwyVC+lPK1SdW:byqtRi2OR+ZtHF9v8","tlshash":"8ee2e13ae81308dd65a1f88f8f9e185fb1c5b38ab6e5db8065345cb4245a454283752f","first_seen":"2026-05-03T09:25:58.572004Z","last_seen":"2026-08-09T21:23:30.724378Z","times_seen":41,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/press_field_background-Cdz_S5mJ.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.226Z","timestamp":1786100161226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/press_field_background-Cdz_S5mJ.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=dRg4Aw1y5q14mhw2; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.58; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-283f\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BbWYKRrWMwvcbSuW1ExkVTlj7AbZmq%2FcF52pqs7vH4BLo3D4pCnxUE2ZvF0WJRqKoDPPnJiMQ1Erb0guZr%2BIPZy0J0CXH6LvKzHv9Fc7MyoVhH0WSSgfwLLjcsrAwhuVLDPGGOF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a275c097a91c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10303,"size_decoded":11396,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"9277f5f4e0c5ec965fd895fa5230a295","sha1":"e633562ab343c2e694d98ad152e511af4ad9d465","sha256":"d4238606fd0cbd7fd2bc4f8648e888f3a48f50642773f64dd2c24d65b180bdaa","sha512":"5ab3eb52c0ed0d91c3d1c7b66f874c97dccffea2870cb627824e144f8de9b146eb61aca937d6ad48554c79093c4d657f928e115c305ef01e27b0e99b4ec37baa","ssdeep":"192:lSE3Gll86piYg5VkOYMCToZ5aGCiWDnn4rNGJYlvgPsPTQhTI73eG:EcGllgYgnkNoqGtWDnn4rNGJqPTQJpG","tlshash":"0a22cf4e3c5ae448489d67f1e6ce0350813d1be68ddac0fa26964ca229eff6c070d793","first_seen":"2026-05-03T09:25:58.436952Z","last_seen":"2026-08-09T21:23:30.729573Z","times_seen":40,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/loader-CXc1Xk5X.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.297Z","timestamp":1786100161297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/loader-CXc1Xk5X.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=t3tocWHmDjgYcqW3; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.14; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-4eaa\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7%2BROQNekMlVhLJEhlsVjF83LZL4D6rohw5%2B7Kl%2BMmzr4txK8AckSwRR7oDoDNv%2FZBFjvD7zdqGcx9wqzsAvijY%2BCBJG3VixNdmsW4eU7x0mPlA5JyaDlME6DhqL%2Fl%2Brql3BmeQB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09819275690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20138,"size_decoded":21241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f0d0f88ada70f9aec52dbd193ec3c6f","sha1":"f56a77bcb7e424b2efa490a29f102a0d0bbcb14c","sha256":"6ac9fd6a4bb0d8ed08573fc939a6aac8b67d75d844e7689d4eabc200cdf145dd","sha512":"6c94f5e59498e1671c6ece4ae7c58a60b8958306381a163a5262ff0037f8e1df3499bf272dcfd5a423300000bf87b297a3ff842a45af155d5eb26395604ee8b9","ssdeep":"384:DD/7SGkMvrBoBY8bWx0SFJEqgtPMPBaPYq7kB+LTxrw36b5BrcCvwRBNTfVCddaG:/DScjBU0xxS3kQxrO69qCvwRrRCdW8","tlshash":"0692e09d4291cc617069e13b956039dfdda17d3fbca017da63817f44c480dc98a1afae","first_seen":"2026-05-03T09:25:58.503509Z","last_seen":"2026-08-09T21:23:30.776736Z","times_seen":40,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/bg-free-money-R7HNNOGD.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.319Z","timestamp":1786100161319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/bg-free-money-R7HNNOGD.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=9vAYwnRpe6sn16c1; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=162.158.222.67; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-1b970\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6F7zIdiSAHD2XHooP0%2BN7KFFZ1Islpb4YVU2G%2F4JWx2Fv4CRQfflBalFgONL%2FuutppFIRFXy6GHe521eyd7MlWEopxUCMHHKfRsazQhQyV%2Fhp6jRWT4HYDxKvUgaWrEevntaYb6N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098392f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 113008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113008,"size_decoded":114106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ca92464f796384e06d1727f8c742c90","sha1":"117d206848f00d51604884094a3efc00488c3e78","sha256":"0ca6ffa09c80486a780f44eb589385e110f9f35728ac08ab803c478da70c4f01","sha512":"916cf61962e80cca16f56de5d75b7f23c3d00eec52b4bcbd4734cd78d9748e8a066e3ba549c6c5f140275ca5326c1f594a5045aef5a45abbb0a9b2aa18206750","ssdeep":"3072:bfs4Kj7sjohw0qKAf3losUk9JnCVeALjcDXyUQCddTYo+:bk4asjohw05Aash9AvLUQCa","tlshash":"91b3120b2b15d14925b30185246719e5d2f7f3e9dabee3860e8602711fdeeeeacb1070","first_seen":"2026-05-03T09:25:58.469503Z","last_seen":"2026-08-09T21:23:30.760101Z","times_seen":40,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/big-wins?limit=20","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.379Z","timestamp":1786100161379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/big-wins?limit=20 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"1b9a-gWJrUVZpm+P4VzkqBtJ6P/HEqj4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiwTKmoyN7LAFaSle3Z%2BbVu%2FihZQUzajEHYkt7SCgOvX5tslSTmZ5bcqYIR0FClsd8ZCe5i84QQfdMN3SJD3FtOqNQwLWiqnhoryZHG5COWgbbX56%2FZNPA3UndYdn9UgfVE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0989d09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7066,"size_decoded":3334,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab2ae2464a338b316a1dbdac93a99bc8","sha1":"81626b5156699be3f857392a06d27a3ff1c4aa3e","sha256":"a59b8fc5c004406b65ee17d3d877328a56f72afbb84d0913215d3a252ddb3ad5","sha512":"900de44afd33c22f90d65adbbb22177bd49fde28547b6f3fd86429ec660e5f8d7d21e5363e58219ab7f08dea4b8ffd1cfae3adca8e4ac965148df27d3e340cf2","ssdeep":"192:I774G6t6uy2Vxz7s8t5hApxF9LBom9XaD/jL+EqhuRFN6mcEnkOlFeEnPPClQpNb:s74G6t6mzzA8rhexF9BdkTuvhuRFZNnp","tlshash":"ece1006f58482cbddb355bd48449746ce8eef1af95d05c0880aa8c3fccf45d62ab8927","first_seen":"2026-08-07T10:56:41.964534Z","last_seen":"2026-08-07T10:56:41.964534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/GCB-C_pqZ4Du.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.392Z","timestamp":1786100161392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/GCB-C_pqZ4Du.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=dRg4Aw1y5q14mhw2; __ddg10_=1786100161; __ddg9_=172.64.209.58; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=mOGTT2FpqViNlrcp; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.48; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-4240\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kn2at02yaAAm%2FqbrqKVHC%2F9UjFzzsBVdIZSXSQ1B0F6cIWFEKlyXF296gfmYE%2BYYyFPl3sWOdgWSpcaRr%2BSzde8IyPj35okzE4FIi54ZMk8C3hw%2Bk1WLKEHKnloV9zRzSU0vGIF9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098a9435690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5791\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16960,"size_decoded":6937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b38adce4f70c1a371bbf8f1da27fa17c","sha1":"4c9ba68797012f18287ea8a5cea5139034f47244","sha256":"540b4b79532f284728630a532dce3264d1df8bfeca3ed67b2be10b2eb1dd17e9","sha512":"8f6cad2f48b4a474f0cb172f8d61c323ad65468d0a2ab614d342824262ff1456c6e95dc62bf12edc333f794108e532980b44d024400e562facf2dfb00a768308","ssdeep":"384:n2O6uod1fGTPRl2GarXw5snhFdnqmiVJ945:2ruodxGTPMhFdqmW90","tlshash":"3d7283c032b693ecf60af7bc5b2560317c2324edba926574c7b66e10d45719c1e9a8e3","first_seen":"2026-05-03T09:25:58.46864Z","last_seen":"2026-08-09T21:23:30.704206Z","times_seen":40,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlightx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.130Z","timestamp":1786100162130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20starlightx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"89b2-19e87eca9ab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AplSc6Qc78mTK9N7bYsYWsuAQTE6Qhd19nQ9c%2FH4MtrulEDyBRl0paUaYGj9B4Q66Z9f56GEz2dciyIu2IO3RoxF3RytrAckbIH1QlYYxr79FdlHl7ce9WWYHXgJLqq9zhk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dcdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35250,"size_decoded":36671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3ae3ec5a75801b381094718d06dcab2e","sha1":"7eb10ebde706bbcab68295ee9fb2af204c97886b","sha256":"3cdaf2affbb77d8a1e05ecd3bf913ab2029f2067674709c4564fdb7fb2e25aa6","sha512":"f61ee24ee3d37c2fdc9d4ad7e5e6fbc1125475dbb11ec79f4ea977fd95a80ac407c720096081e2cc3defdd8819c41a35a2eadc2b5d326b9d4b65a9ab4b00639c","ssdeep":"768:nEnkhDG+JBWk2KiU3xY08SwZhfNqhz6uMkncw3ucL655YSG:nEnkhfWk2KiUBY08LZlNqhaktL25YSG","tlshash":"3ef2f15b3746bcd6a6cfb94b28bc5b0a7e1e1811d5f12f56c148c6aa2d3f47c3a63012","first_seen":"2026-07-10T22:56:48.050838Z","last_seen":"2026-08-09T21:23:30.718254Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-tiger-pg-soft.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.133Z","timestamp":1786100162133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/fortune-tiger-pg-soft.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2c576-19e9f3746e7\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWGAsDELbEsIztnk9jzxGecLnVhNYRXgS8ZRiNOljg%2FLv31ikhp3twKayyfGViGr1QHcgSiS2r5iRwW%2FU36iW7hOgf67cms5OkbQ5KPqNwuZBqBKIEh3K4OZlaNquS%2BSmzY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d5dceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 181622\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181622,"size_decoded":183049,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99aac2f45cba52a0def8db674c0f9838","sha1":"6705d3749b573a2b8d6bde3c442f9504bdfa40a1","sha256":"6f144c10c96b38072b03c2e48db04c6c2ef2bff25040c444a2265b4fe1c12f30","sha512":"ad96314ff6a420426915e64f3d6c5a7aef7561dca3888d4c4c306866b6d4cf61fe44c5e1940ab995609664b9a673194baec7b4229bd13e1020f2a046a2e65a44","ssdeep":"3072:syoRKgdJ75VrUb2JCqvdjNWerJsCdEnRyFB2yb8vFg3/U9geulpSOyydXLe:slj5VhHdjEwJF0CBHbF7lLDd7e","tlshash":"8704123e054c51bfbcfecc87ba986dc88be553e2424c2a93744b660d563392e91f84d9","first_seen":"2026-07-10T22:57:05.835099Z","last_seen":"2026-08-09T21:23:30.763789Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-gold-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.114Z","timestamp":1786100162114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-gold-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2bb1e-19e1889de1c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mdws%2BONzfJLgb1Ubnbo3tzIPdD63k0jSCC5GMkq2iKBKnvRQgTs0B9%2FtiHAzdFYVeIpICs3m6YGir%2FYu%2BZeooLst%2FdsKZFKhl1KjrmEFEwRK0gLoDnaHeQHy9%2FOh5n7htYQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d3dbeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 178974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178974,"size_decoded":180407,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7e6786b8f04722cfa883924cf56e618a","sha1":"11834b65154c89318b09e30540170438279db363","sha256":"d15c8109068462a9bf3994fb4ef6f126253b038b1ed7e2030c23f013dc7a8857","sha512":"0e188cc4eb6bad0ec7a3eb8e6bcadbd2ad447ffc868ec327abe99924d910c8c1b38bf5607442880655d691967bb27c87abbca0ee85fd7ff4180942a96958a690","ssdeep":"3072:wbRMbtR2+Z8ik03JdOr2QjubVpGy1lYxba5gzDdmTrCgqZnC1Wtkbzi6eI3uMkRg:QiR2+Z82Cr/jubVk0I+gvjbCMtka6eIF","tlshash":"1304138e2c596af29f843e48c8d05f3e4a7245e7df80b1d60e0bbcf71e9018867b5556","first_seen":"2026-05-03T09:25:58.480792Z","last_seen":"2026-08-09T21:23:30.721093Z","times_seen":46,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-two-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.123Z","timestamp":1786100162123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-two-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"1e8d7-19e1889e150\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tniJmerOWy73jc2jN1es6TtjA5VXYolP2L8yK5WBkvFx5MsdiosWvlsrjqeyMvNC68ncf9T3Eq80MLajkQQDtC9JkfjGeFyeNAvNSuVkQ%2B4TxGLa4nEzZ8GLVV1c3zVrflo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dc4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125143,"size_decoded":126566,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2d07f21bc75cb17f3940a7123055df18","sha1":"c3fd481de5f7cc6fc3a4bfbce86e2bbdba460c80","sha256":"9ffc0c533072f341ae2d4e275de1a7a5bf86aa9ff2ae655d29a762af22dc6889","sha512":"28f58e9df9b691e95c7020e505dd5625a186f3841a5ded08138178f438c6cbde536e97c10faeff65caacc8a9e56e1d2794e20664bdeca81e12c2d6e98f4b5817","ssdeep":"3072:jbk1ZeasmvqGo36qLo19b9fxS81h2n1Yg:U1Zea5fdWo71xDzS1N","tlshash":"33c31253a6202d8bc25b83fe551b055cbf7d8de00d29baf78e5ffd618a38ca1e944409","first_seen":"2026-05-03T09:25:58.448805Z","last_seen":"2026-08-09T21:23:30.751738Z","times_seen":46,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrush.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.128Z","timestamp":1786100162128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrush.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"74da-19e87ecb05f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402216\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqonLcOFOOVAVOLMnrOXQ4k%2Bccrxfh%2FDWTQHhZR%2FlVjcusZrqOVJ0rO9CZEQI2kx%2FNCz%2Fsh0XeXsgDHIhbBOjXUE6UfoIr7EYMw3ywKVcsJNBtJoig1ivoB0SYgFfgX0y%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d4dcbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29914,"size_decoded":31345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5d34e92022a20b828fc43e0f5325f88","sha1":"84d7c51ff977d6dc7cdd6ccadb5524c617720840","sha256":"05f2eefbc3a7a73ef1cc83b31710ddd700b1e3f3ff4a23134de10b7b06d12a3e","sha512":"2c9637ef738349f0817dbb21371d276b68a06ece886665218e45d004fabb277af7e9b742c146cded525cd5443c243ac727041f08a0b1e5cd1552405f6323acb2","ssdeep":"768:bfrq1WWjyHPGdsVtCOsirTXlW5T7YujH5JazIUo8iVA:bzqUXHPGdsPCBOTV6TVaMR8R","tlshash":"6bd2e1b7010bb490789250d8e1129e9dc1f31bb5562757389cf889a318f6c727d26fec","first_seen":"2026-07-10T22:56:48.118862Z","last_seen":"2026-08-09T21:23:30.763125Z","times_seen":36,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-ox.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.135Z","timestamp":1786100162135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/fortune-ox.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2a8d2-19e9f374a77\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:21 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5mPJn%2FjxVhwscq14d8OJIYQGEGtcAUf3xYFv7SXmuqQyX0W8AiVX9JRF6%2Fzz9tpNFrCkzGDMDQz3N6qayNVqr6ZicDkcnCZN61RnFzwJVxfNazi1J70m2784imflnxg2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d5dd0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174290,"size_decoded":175715,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c66095f87278d84f1edfaff10b5b01d","sha1":"65ccef4cf03bbb81bcb642233a82bd0fff10eac9","sha256":"255aba0714080a1932810d280b72faacd3e411ae9acf4c61cdb1ab7116ebeb71","sha512":"fe17aa13520a0c32a3d60e4c5f88aca93609306be1aee3c1a4c18baf91feeb2400ee9eaa451acb3062315f449fdca5e304873b1bdc40bdc525dafd8523bf6a60","ssdeep":"3072:nkT3mJ6MzKeHOrEVQVVrPBL/10V7BiHH+46JrphRFju9Ne1Av:nHJzW0NQVvLd0V7BQ+vrphRFju9NDv","tlshash":"b10413bdb6cf7d8cdb4050c795b8c26000dac826bf2acc7d12014f593250a9a29eca7b","first_seen":"2026-07-10T22:56:48.031614Z","last_seen":"2026-08-09T20:02:21.109091Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10256.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.156Z","timestamp":1786100162156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10256.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"36502-19e87ead2b0\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 404474\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZfXrLHaO8fGY4pxYy%2FkrOJDIHndovTiymjZEIvwNMk7jV99MFPdBLmcoOXd1bmvVi0iEZAwjPx0xppwNyTo%2BhZmeYh0KJPpFGtD%2FvqTlJyiggQMQmd%2BqWmy3DfybFIzNIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d7ddcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 222466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222466,"size_decoded":223895,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"661f796f4d5f4a660dd1873088e19d51","sha1":"dd4c317b264c8284e032acb64ccff47d5b70fd92","sha256":"5f3ca33d1a4473fcfe1bac6bd57f611d08cafc9cf48cff0c3f9decc614cb2cdb","sha512":"67913e397da426b60a07da35ba206393ffac1c53622e04381429745c92dfc9bd5b2a2465e20746f066685a3f7bdda7b85cd25661f48edb5d60d0e8dfd67421c2","ssdeep":"3072:uwPP/Od04pLZfPZezZ6Cj6nvWe4l1zZ3tREe1Bzrmz8orw6FOIArvmtCcu8guJE8:uwPuiYZfGHev4zdXEufmz8e8Ulgu7","tlshash":"bb24225dd119976cae0d940f028f69fad8b621cef65e22c6146abe7c0dc877d2c3061b","first_seen":"2026-07-10T22:57:05.910661Z","last_seen":"2026-08-09T21:23:30.739717Z","times_seen":15,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:21.896Z","timestamp":1786100181896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:22 GMT\r\netag: W/\"ae6-z9tiksD+dk1jtaYWc5ui9X33qDs\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HajeH%2FQO9ndGQpAvZGOceVnq16IgGgWBfoRpyefx3pQD96UqxA18JoX%2FSG6LKvhHG9o%2FfIBm%2BH7zyFyEDEHi0nMc%2FwwSs%2BRsNIEoFU%2Fcy2C4Rs8chcbk4bdlJx6yU9rG79Q%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c118dbcbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2790,"size_decoded":2332,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3a2c0a1c42e3baca31a6822683576a6","sha1":"cfdb6292c0fe764d63b5a616739ba2f57df7a83b","sha256":"bd8a26f2eba8470880e1ed62198bd53c96b5a86a74aafd7313271cebc8d98a79","sha512":"887f491e206ee3a3e93f3a87d9d436ff9dc263d95f8f4348f03f07623e827760f0cb60e5fc925036ab7e1d590f4b0c965e3f651c54a3c578b759af58dc444ddd","ssdeep":"","tlshash":"9b51ed7f54482cfcdb359a94804a74ade8edf1bb96d11808c19e8c3ecce15d62a7c963","first_seen":"2026-08-07T10:56:41.973724Z","last_seen":"2026-08-07T10:56:41.973724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/fonts/Proxima%20Nova%20Regular.ttf","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.262Z","timestamp":1786100161262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Regular.ttf HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/assets/index-LIP2OaeW.css\r\nCookie: __ddg8_=6C8nK9ar3HiBwuax; __ddg10_=1786100161; __ddg9_=172.64.209.10; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=zjKvXX950ZqakCbA; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.42; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8193-2d120\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:23 GMT\r\nage: 362\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F0pOF6YaFd7QJUwdT95TTpbn19t37lbdxSZwySd%2FbNhfYyLgvFHvVCcpY%2Bm9JG5nXGqtnyu7HDCSzbtNx4yCL1SeHld0Y4BxtmJIUFCBMeZckRJ0KR7mcB%2FBYMQA3kfxbKZdhTaR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a275c097d9205690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 184608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184608,"size_decoded":185666,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"386c8ff06aaa9d3ea14528a5703b6ec5","sha1":"7174dee37d9851739eb6e9f24152a91e1024c9bd","sha256":"f715d9c3a8a59c2f8079955680d811dfdf069f769d8521d830c85ae3393dc6a8","sha512":"7cb4238a5f19b76ce505139f6e99de9d2e835d2049ad95bfa2ffbb352213dd6be6143bdd6659cd5e81cb7903dc253dc6fe5750330cfacadf7de5690c4a8f50cf","ssdeep":"3072:txztObnQGIaqRnDzM2bxreVW+KMY+Qc8FT69FNpp3JtGQY8E8VoLw2E8H7O1j7Bb:tZtOr/A+g1c8taZTJVoLoD","tlshash":"31049586eafb0e2fe3564af8dee6967a0765b407ef3135893d80e540d2d72602843dd4","first_seen":"2023-05-24T17:26:21Z","last_seen":"2026-08-10T22:32:04.884893Z","times_seen":416,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/gift_top-CVczyCaQ.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.612Z","timestamp":1786100161612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/gift_top-CVczyCaQ.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=S6ZDRs7uMB6ftusC; __ddg10_=1786100161; __ddg9_=162.158.222.88; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=tLIoaOZuxjvbWSPl; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.74; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-8836\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99024\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbewnPj0EKJwWTH9%2FdLm88TTuGp61DlqcjwpJ1GyUAu41lSshAikcvw2tKjAUDHdpCZDfzGqM%2F19PaZV8x0g%2FIF4SMOXIayd345mjKp7hRds0NYOKHYuPm0dwT6ICmtLeVTEzh4g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09a09585690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34870,"size_decoded":35965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b8733c79c48b53b6462523f9de03fcb","sha1":"14073d4601e11f5cab29674a2949b05b5e549fe9","sha256":"c648bbb0c45d11f24a8fa6931655c0cd94c14fa31b9c0326d333d2c8b36b5dba","sha512":"fb1f0a39d948404267b5486c7c6ae9474a85f0cf56ece4f291ab20b2e2d4d5195cc6b1fdf7fc34f8717a70d5fa666f88d949cbe36387e64356f8bb4186796cd8","ssdeep":"768:CacY9XQsOkKCYJDp6UAzuuEvD6fk0kfMaJKkele03PNcldFYyxfk:CFYel1DpwuNvD6cDfI36LFY9","tlshash":"acf2e18b2a267253799ff19fd48bc5621d70a6810193ded44223b41ffe8ed123935a72","first_seen":"2026-05-03T09:25:58.447757Z","last_seen":"2026-08-09T21:23:30.754562Z","times_seen":39,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10bbkir.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.137Z","timestamp":1786100162137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs10bbkir.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"62e2-19e87ebc18b\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402215\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hxOp1OSwfxi%2Bwo1SjqK6yKYLPVl0A7FKMscNy6xZ9OWTE7p9Q4UH1672ZVk%2F19sIrJsOXKtHOyKHUYc8KK8HkTxnodBO0uCoMlHolZB0vGvvICSSRKZCeftIIYBpYtyeWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d5dcfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25314,"size_decoded":26737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76cc863151d8ee249a995e2e56a47131","sha1":"a1968240e5eee90208167d932fe666d0d170f4fc","sha256":"49bb42ff09fc936aebb3178d1455a9797fd99dd7ae6452cf84db83b0a0eb3f41","sha512":"18611745ed86961ffb7ff90b747879c9b7299069d7ffadf3452e7b94f9d423d4bb592f91e6b99669ed26c23ace222d417e88570ddb46b2c48b29f68f928f55b0","ssdeep":"384:0zARXsPBLHukvWj4You+JzC1KDa3tV+Ts9E0gA+wDoPl3j6Uky8FCOeD4tSXLzpF:0UtspHjvU9+JyVAs9ELwD+VRLzpACqG","tlshash":"58b2e0ebd5703432b2c6a1ae925575cef644849a345268858f6b42c8085e8fd2cac7ea","first_seen":"2026-07-10T22:56:48.100947Z","last_seen":"2026-08-09T21:23:30.721849Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/treasures-of-aztec.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.157Z","timestamp":1786100162157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/treasures-of-aztec.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"2bc1a-19e9f36f890\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fANYU4R2Jrur4w8IKSi1Vzq2eHFDtSxygNPL8FH2ozG%2FHEDceKcVkSq7jsNlfQH02TTuqb2hTVxyyN6SmbES9zQuJXRvFUGTFXK02a1V%2F2f6SEEhIRYM949f3ov%2BVcFwUuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d7dddb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179226,"size_decoded":180653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"159b55dd119ace08f169c05d6114f13c","sha1":"6a2c0e3c4925abb04b41177a253a6ecce50f6341","sha256":"9a85b5ecda9b78cbb3793c036540c002d6f24add1a7fd895af1c68b29c2bdbd2","sha512":"20aa3271c146f03e4a60cb674b151e084a0d0233cd425550863622be381fed6795691d6122bd8d3ed0251c8a076af1a62e352b7d8784d9ed69336869e095e375","ssdeep":"3072:teJQwUeOtXikSZsYpb+TwXQSra/PotmIghfD8ySYRx0y/K3hS3zj3qa0Y4:NwUB9VTwXQ7/UmT3l2a34","tlshash":"8704121ec6ac32b2c8c116338e6b27f644d7d436b8e594ba5b4d50d8c67327e2ec4d49","first_seen":"2026-07-10T22:56:48.078713Z","last_seen":"2026-08-09T21:23:30.755296Z","times_seen":15,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:11.725Z","timestamp":1786100171725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:11 GMT\r\netag: W/\"ad8-6ujTc8R0PLUhMn2dpuxDXT5Sqz8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBkIoYNqddizFPKMOVsfqQzYlS1jab1xjdzgWZPlnOYV21inhPOkRsSW9fQJtdrFZz0EbfKsVduVAnuAx82iVWkp4NaeylLcG4qsTV0RCgONavy5D1QXk5r6aOkR1YWjgks%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0d94894b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2776,"size_decoded":2306,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6c9c6dac2d65e9b1973d1cdbb80ad33","sha1":"eae8d373c4743cb521327d9da6ec435d3e52ab3f","sha256":"e4d87c2b6dda9d2f6fcfc51c89bc8e21a43584b1ae12823616901b1f3318aad3","sha512":"62580817e538f29640e60e2b6b4d968666f18401a5b1e5ca9e3c5ee8e4f31e87c6f83fc5cdf798588154e4507c438dfc0c7770956e644f97e37b9eda28e69c77","ssdeep":"","tlshash":"8851ec6f91842cfcda714a90848670adddddf1afa2d01808c0de8d3accf55ea297c423","first_seen":"2026-08-07T10:56:41.980171Z","last_seen":"2026-08-07T10:56:41.980171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.380Z","timestamp":1786100161380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"b1a-HQrY5gQV9WEQRm/F8M1YbQZCY+U\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayEo6AmBTHXZVzYVGgR%2B8D8Z5EQ2utnGqtM13UmUulAftRU1NABwNNAi5Iz3KKROGrLSWJOgNLNwnAQayqXSudiBK2dfb1rAz8n9QM39L6f5goTt%2Ff5OLqJyBlGfi6RL1I4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0989d0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2842,"size_decoded":2329,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2281cf6b384f8320ff8ef2329346bd4a","sha1":"1d0ad8e60415f56110466fc5f0cd586d064263e5","sha256":"f99a28b1c05de4dcc47598ff12a5d9112fcf99d8949fb92f5ede36a3716dee4c","sha512":"df08300f58c4b72205829b7997c711232c7729f4af5b8b0c8020550edba4bbb26aa445cc1ce6601e892c88e6da587671afa1f9fe8ff2929f0db94bce6a85cf16","ssdeep":"","tlshash":"0351db7f94042db8eb754bd88049789de8eda2ab86d01c0881d98d3accf55e629b8527","first_seen":"2026-08-07T10:56:41.982397Z","last_seen":"2026-08-07T10:56:41.982397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/four_footer_icons-DtogFTme.svg","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.391Z","timestamp":1786100161391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/four_footer_icons-DtogFTme.svg HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=dRg4Aw1y5q14mhw2; __ddg10_=1786100161; __ddg9_=172.64.209.58; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=erlVjAPwtZpeS8Vb; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.46; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: W/\"6a5b8194-becf\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 99025\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bmVoyhGlr9S2rXcnqATFWMvfNd8kVEBtgV7%2F4TJNOj7zx6GBc84YxDntd9VBfIy2qD9b0NlzCfwyYDlhC0oWDa6mW4BmblhJCjWux75qBopNuIQ8fEPP8CcByeLiE7ySvJ6iTpZY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c098a9425690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48847,"size_decoded":20075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb5e1c21811b02433e586468542b46fc","sha1":"b776f6a1ed3d0f7cba4865735c2aed1a54752747","sha256":"01b97b17936fb9f2e013354e9fce99a64a42ad4d714fde061698c7f9dc05ef01","sha512":"4d491365985e196b6f3849a7bb2c1e7d191dcc482a6f1f91c86531c84f4387a1cf228f1ed0f098ee8991d03af21e429ea6095b635e790b7d889b06396ed692fe","ssdeep":"768:JlxkPAA53GZV5JLphzrTboxLc6B4aScK9PIY9BIe:Ve1GH1nsymhTKJBIe","tlshash":"1f23a3ff7be421f0a046e7e5ee328475755b68fb7b92cf44c3889e947952098c889c81","first_seen":"2026-05-03T09:25:58.431523Z","last_seen":"2026-08-09T21:23:30.760729Z","times_seen":40,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secured.tondrop.xyz/assets/gift_bottom-DP-TDRai.webp","fqdn":"secured.tondrop.xyz","domain":"tondrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.139.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:01.610Z","timestamp":1786100161610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tondrop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 15:18:25 GMT","end":"Sun, 11 Oct 2026 16:16:55 GMT"},"fingerprint":{"sha1":"85:CE:78:3D:08:84:68:52:1A:44:18:3A:1F:88:4B:3B:68:7E:70:81","sha256":"E2:6B:A8:30:F0:90:D6:4F:DE:F1:3D:37:4B:1E:C8:8F:4C:37:93:9D:D0:CA:F0:94:E3:92:A2:12:51:AB:D9:FC"}}},"request":{"raw":"GET /assets/gift_bottom-DP-TDRai.webp HTTP/1.1\r\nHost: secured.tondrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://secured.tondrop.xyz/\r\nCookie: __ddg8_=S6ZDRs7uMB6ftusC; __ddg10_=1786100161; __ddg9_=162.158.222.88; __ddg1_=zC8qHwK6BoxmmcEskWvu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=FFyezRyRAO2xOREU; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg10_=1786100161; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\n__ddg9_=172.64.209.66; Domain=.tondrop.xyz; Path=/; Expires=Fri, 07-Aug-2026 11:16:01 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 07 Aug 2026 10:56:01 GMT\r\netag: \"6a5b8194-d20c\"\r\nlast-modified: Sat, 18 Jul 2026 13:37:24 GMT\r\nage: 99024\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xe1iNpps7bBfqxLVnXbSEwAucpS1vlDLO0V8lyBUBGAiq%2BLhmjv9WVffM6EI3dAKlG6Rh4lLOFKjXudUex7%2BS6dHi%2FSW4n4ogM6sstBhXubIReKLShxV76cw8JE8K%2FJCZR8Xrd14\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09a09575690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53772,"size_decoded":54867,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c65662c6b87ce8ca21e63690a9620d42","sha1":"a7b0c23ac295b45a1606686c1af683c53d863107","sha256":"262cf86dac4d7f23654ee92e9693edfe1743ad825b7f0a9ed083114a624139cb","sha512":"e08134fa8aab3f309a661d8f10917344cb939050b57c9af6aef672d379b9831be6ac5332056b114e50ab86eef0f659f4d3f8a7c33d73805768a9e3b3dc6cfb0d","ssdeep":"768:ljqwJW6lBWsL9VPSn8oOwdRsxTe8ZEaZzWTaHRSHlsjbKQsEXo:ljqwHWsnhoOwdRshTEapWhstvXo","tlshash":"b033f1346f841cf5e008b774de992101d36b836f639793d30117e4a6aa48e27f798bb9","first_seen":"2026-05-03T09:25:58.55733Z","last_seen":"2026-08-09T21:23:30.706517Z","times_seen":39,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/aviator-mini-spribe.png","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.108Z","timestamp":1786100162108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/aviator-mini-spribe.png HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/png\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"f837-19fa9266394\"\r\nlast-modified: Tue, 28 Jul 2026 14:34:53 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402217\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIn48rR4h0cWjN4mRDCYFKfGSOqcbbwYFt5WAtRClCZUcobbDAkIA6ACYAXJojWQgIOkOGbUQDfyvysufxdXR67e81Fq9A3pzAI43q1K%2FHMZfbjUnAp%2Fu8G8C%2FPeXX1V%2BJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d2dbab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63543,"size_decoded":64969,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1c52b5f3e659f44a930d15becb7f39c9","sha1":"9e28417a76240110757c73b6faf3ac5ce1bedeac","sha256":"9d16af214603d98995216e1c5fd4f75fa7dda5a61a7be83babe7c8b8871e420e","sha512":"c2a648fd43d03cfb15a20bb5602b5e64ff5178cb0b498e4751ee09f87c98fd2cb9a32b120462e7daf3d411058a9cc3b341b0d3b497c5cde40f9d4a190493a100","ssdeep":"1536:d3k0b7RKpki5PUOzdtZS8YtQ9lFMZ6xQEDf4:lZ9Kai5nzdtZS/mMZ2QEU","tlshash":"955302fbfbb3abde1188524a4b312c25f59e12ca9d6f1497b98420c1e8605156de733c","first_seen":"2026-05-03T09:25:58.463676Z","last_seen":"2026-08-09T21:23:30.728882Z","times_seen":22,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/muay-thai-champion.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.145Z","timestamp":1786100162145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/muay-thai-champion.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:02 GMT\r\netag: W/\"27416-19e9f3720bc\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:10 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 402214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glnKd9FXT3O8vO1r%2Bcw4nkobLXSKqODhjSY1%2BiLKdOT%2F5o4IckXMhPgqx3KXb9%2BLGf6tKiREhhLIiIVv%2BrTx4gvoX2wFsEAyMZ4hqALuZqqs2jW7fqrZWD9Qfh6ti8eIdao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a275c09d6dd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 160790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160790,"size_decoded":162221,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"015527a6fd7c25fab2db458886141ec1","sha1":"08952b6ca5fa2a4ebef6baa6167149f1e7231ef0","sha256":"e419f23473cf1bfedefbabead9216691cab68c17defc17cdbc355392948c8570","sha512":"235b8e3f9e565399ccda7e3ed9407f67cab8a1c0de7bc3f21a874b9b4656472937ba094140509a7ca0321d915e4b08d8b34fafa1f988621fba904b7790e0bbc5","ssdeep":"3072:fg8JQbwX5XUspmw70HkLYwsOFN6lIMNx5DXt7Wv4ZpLHXpcVmXj9la2:I8JQbwpPpmw70HSsWElxN3DpWQbiVm5t","tlshash":"adf3224ee673ca249aaaeff96bd9c0ec461575160dcd9c02c8cd479fbe485408baf160","first_seen":"2026-07-10T22:56:48.051935Z","last_seen":"2026-08-09T21:13:42.822815Z","times_seen":21,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=secured.tondrop.xyz","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secured.tondrop.xyz/","date":"2026-08-07T10:56:02.727Z","timestamp":1786100162727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/domain-info?domain=secured.tondrop.xyz HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://secured.tondrop.xyz/\r\nOrigin: https://secured.tondrop.xyz\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Aug 2026 10:56:03 GMT\r\netag: W/\"3b-QqUqK7/8zbrChDR2IMmq1HttvMw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6R5JDU8qGWMKWciXH21sDDQybQLlRMW4Or8H8KKeZ2%2BnklOrkweKb6F2%2B5wt7t%2BKLyAwyueZOXyZbId6cBw2derhaR1aPYZkK3w%2F15UHpHdzYrdDGvh93x1MPV8K4e34nY8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a275c0a10e58b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59,"size_decoded":1429,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a16566a886934f4b5a26af987de1baa0","sha1":"42a52a2bbffccdbac284347620c9aad47b6dbccc","sha256":"317167bd7cffc803bd3770dfddd055b1e03b52cf132e4a89ae7092819a84dfaa","sha512":"81fd0df554a1549e5e2d5f5c6ca09df0d7fcecc140a7a68623edada6d4a81201fe1d7a76bcb7e66d25df0db50da08345984a8942b7686f0aad84233f5f6a2c1b","ssdeep":"","tlshash":"e2a0020856422e2d0f514599399174302bdc66c388e51551445da65c9581571ec2557c","first_seen":"2026-05-03T09:25:58.4979Z","last_seen":"2026-08-09T21:23:30.702949Z","times_seen":19,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}