{"report_id":"4b79c4ea-8516-45e5-a591-e325082b292b","version":0,"status":"done","tags":[],"date":"2026-08-16T19:35:24Z","url":{"schema":"http","addr":"goyesplay.com/ybabqohfq?cid=w76e998bhffcjrjkj46u1gqa","fqdn":"goyesplay.com","domain":"goyesplay.com","tld":"com"},"ip":{"addr":"104.21.66.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"title":"Sign-In/Sign-Up - Lucky Numbers","dom":{"size":168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"7616484a0e53ff38c5176e819f1c8d20","sha1":"1296222ba374d84f12de4ff5757ebbe62740089d","sha256":"0c5b604689f21a86eb4522e3be38cea900b4e574c80ec856faf852dd59850ba7","sha512":"7491bbb6e09b0a02626a2f2afc75e77a83ac3593bf0ff40a13893ba8a839d67fe0fe929a87fd245824122f3c359326bebd3811fb3ef8d165a7becd8f96527466","ssdeep":"","tlshash":"92c08caf8d93805e8d1067c098aaa2188a04e26daa16cd449de078946904fca28aa38c","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-08-14T15:57:16.011559Z","last_seen":"2026-08-16T19:35:36.711401Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"goyesplay.com/ybabqohfq?cid=w76e998bhffcjrjkj46u1gqa","fqdn":"goyesplay.com","domain":"goyesplay.com","tld":"com"},"ip":{"addr":"104.21.66.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T19:35:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"yesplay9278.zendesk.com","ip":{"addr":"216.198.54.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2005-05-16","domain_rank":0,"first_seen":"2025-10-06T21:35:11.751336Z","last_seen":"2026-08-16T07:47:46.708144Z","alert_count":0,"request_count":2,"received_data":4689,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.rs","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-03-10","domain_rank":103555,"first_seen":"2012-05-21T11:46:27Z","last_seen":"2026-08-16T19:35:33.825545Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tracker.ads.sportradar.com","ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-10-30","domain_rank":417435,"first_seen":"2019-05-23T08:10:00Z","last_seen":"2026-08-14T11:37:20.214119Z","alert_count":0,"request_count":2,"received_data":103281,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"yesplay.bet","ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-03-03","domain_rank":10350,"first_seen":"2016-07-04T15:19:54Z","last_seen":"2026-08-16T07:47:45.581188Z","alert_count":0,"request_count":92,"received_data":3913052,"sent_data":49727,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"sdkuaservice.optimove.net","ip":{"addr":"35.190.123.216","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-10-11","domain_rank":368760,"first_seen":"2018-09-05T09:30:45Z","last_seen":"2026-08-13T15:37:23.382288Z","alert_count":0,"request_count":1,"received_data":717,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"tracker.growthbuddy.app","ip":{"addr":"18.200.119.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-07-13","domain_rank":840687,"first_seen":"2020-11-30T13:00:07Z","last_seen":"2026-08-10T10:23:22.311894Z","alert_count":0,"request_count":1,"received_data":344,"sent_data":728,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stream-838.optimove.net","ip":{"addr":"34.144.193.179","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2011-10-11","domain_rank":0,"first_seen":"2024-11-30T22:34:25.309745Z","last_seen":"2026-08-16T07:47:47.04005Z","alert_count":0,"request_count":2,"received_data":951,"sent_data":1233,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tag.growthbuddy.app","ip":{"addr":"18.200.119.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-07-13","domain_rank":3787648,"first_seen":"2020-11-30T13:00:05Z","last_seen":"2026-08-10T17:38:14.51313Z","alert_count":0,"request_count":1,"received_data":6700,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"realtime-838.optimove.net","ip":{"addr":"136.110.209.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2011-10-11","domain_rank":0,"first_seen":"2024-12-03T20:35:13.026627Z","last_seen":"2026-08-16T07:47:45.521962Z","alert_count":0,"request_count":2,"received_data":1094,"sent_data":1259,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.optimove.net","ip":{"addr":"136.110.164.149","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2011-10-11","domain_rank":257309,"first_seen":"2021-12-13T18:08:17Z","last_seen":"2026-08-13T15:37:22.049086Z","alert_count":0,"request_count":1,"received_data":419565,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"static.zdassets.com","ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2013-01-28","domain_rank":16846,"first_seen":"2018-06-23T22:11:55Z","last_seen":"2026-08-11T00:04:37.754792Z","alert_count":0,"request_count":3,"received_data":1089407,"sent_data":1431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"tm.ads.sportradar.com","ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-10-30","domain_rank":401496,"first_seen":"2019-07-25T10:47:51Z","last_seen":"2026-08-16T05:36:10.894663Z","alert_count":0,"request_count":1,"received_data":334732,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":2,"received_data":406409,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"goyesplay.com","ip":{"addr":"104.21.66.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-17","domain_rank":439368,"first_seen":"2020-08-25T07:22:09Z","last_seen":"2026-08-16T07:47:45.631899Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yesplay.bet/chunk-DKDDh_qz.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62c0861e538d766f955c577d4db99b6f","sha1":"9e8e449a310130d0df65375c14b7b02726d2c7e3","sha256":"0dbb58a7a69e0d9689ec75d043d5b72e1624504d954fe0460207e2c78862493e","sha512":"c23227c40cd5c4c779f40a66cc449a1a504225c6e24cb516fc7fa99f03579085ce776632767410583afa8998d07d0b5919a05b471df1893ee0cee04d5b4b2246","ssdeep":"768:ljUmsPIOKBVWuBjsmfC9bdI4H+OLANYjXSIX6223BfEIiei/A7FgsbSg0TkFpguB:lgfKyQNf2Tm223tViSBgs50grKSV","tlshash":"ff535edee3021eb60c92d719f2ae66d7e2e03054465cc3e868efc49513a65d6607e8f3","size":65989,"data":"","first_seen":"2026-08-16T07:47:50.112549Z","last_seen":"2026-08-16T19:35:37.025875Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7872003d10d71522a48a0e46c0a2d39a","sha1":"792983f5e519bd48cae5af2a57f2a5cd05adec13","sha256":"fe088a1b1e38615f5a51b1ef45852cd993dacc1739806871fe47da605c6ff96d","sha512":"0a47cd56a46e33016fd365b607d020dade1e3237df3d62932555a5fdfc2d3d2623268c106307665f5c68e5da0aa8113318785193be7f0075caabb08cc33645fc","ssdeep":"","tlshash":"83d0eb6e21ec09000a9f09f813bb2c8c28c101292613d823c8bedd98f958dd20062cf4","size":283,"data":"","first_seen":"2024-12-10T08:36:06.700383Z","last_seen":"2026-08-16T19:35:37.08645Z","times_seen":621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.optimove.net/v2/websdk/?tenant_id=838\u0026tenant_token=2a507747f34943e8b978b5d3e7a04db6","fqdn":"sdk.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"136.110.164.149","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df529cc18765f0a77d739316eabfb1df","sha1":"47e14f9d08bfa6e4724832114a18e8fe549963a6","sha256":"cb0de0f4eabfb68a47c9421a4c0e69fc8ac3a80ec25294389269e5ee54441218","sha512":"8d1ebec9158f2db116ad6b800e413f3f28c379cb36ccc797b582d980ba6a165e1bf7509e211a6233b4c26d528d56b9763dad3b9bada9212eeefc8b8057008d92","ssdeep":"6144:pQlS07BXqwHkRYFoR0yIhTEM7Dj54iAJjYkJgFuCb:OlPoRtgEE","tlshash":"8194758913299d7e91d751e8e2c63b0b1abd2bb7718418f4f0b56ea4f0fba4a0113717","size":419089,"data":"","first_seen":"2026-08-16T18:36:25.808228Z","last_seen":"2026-08-16T19:35:37.016107Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"858c4430a33d22566db4740acb2cbe52","sha1":"23598dc09a828a03fdca01d44118686369b1269d","sha256":"dd73931be2042d04ca061d39f8549f5e299ce51b8b9429721a5255dc422df30e","sha512":"7fc37591e5ac3cbc07e63a3a01223cb6a5e587e06bc8452dac167e8e142a577571f29165044dd280e6382846027da6fa0e2a579ef11b5faebeccd81ed247985e","ssdeep":"12288:M0rLSdnjbqteAPD0GGX39+ADhJAftBlCMZJGqWs:M0rLSdnjbqteAPD0l++JA1OwGqWs","tlshash":"2ad47cd970d2b0661bf345e7506f2006b33939197c0d8490f698ec9a6bb848db1b7fad","size":606269,"data":"","first_seen":"2026-08-13T10:51:38.74408Z","last_seen":"2026-08-16T20:58:47.317004Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-jOTT0c.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5724ae4212bb59cb1cbb91042a839e1","sha1":"488ec6e870264bf090bfb7e7a5b2783562bddbe7","sha256":"ada4d07cda421517fe3b06d6bf85acfd3d10bf083eba3737f0743579ad51c4f9","sha512":"077b41525b90af62da8e879379ed51e553a51a8d3c9846c9904e03c5f1889f43f963079bf00ea059f73b6adbf82eb48ccd0fd9288b5c3856e4870cc6a6b08fe3","ssdeep":"3072:2E2pspJm5Z9NFEDP6Q6OP37Du+AYZjAtZ8n/H:v2pspJm5Z93EDP6Q6k7DuQn/H","tlshash":"ce241a917220353422dfa037c4b70747b79d9085d932411cb2b4aeee5aeef9d22b9b74","size":225946,"data":"","first_seen":"2026-08-16T07:47:50.094407Z","last_seen":"2026-08-16T19:35:36.999911Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BJ_hLO8k.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97603f329c496ebe7b20f30877722d3f","sha1":"5e7517041b35601fda921349bc7026b73911420a","sha256":"61ffe2cbe3e75e5a3a7b6893ea455f0c6240ef1322d5d1af25aa8b84a8ee4aeb","sha512":"5e25752e4c8c7483aeddd05c5e87874a714073f83206084a5332db13bdce15933f3f1b780c79d647f17c11797a53608fb92c0981585c425c5a72532684025f9c","ssdeep":"","tlshash":"c341ff6bb0c1f0f005a9dcb5c010c322d12718821398e739f6dd05a62a97c9af3bda66","size":2426,"data":"","first_seen":"2026-08-16T07:47:50.092924Z","last_seen":"2026-08-16T19:35:37.005628Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DGiXQp9P.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1985a712427abce93f28925e7c043916","sha1":"82479942d73eb520781c781b2ec633b8b1e9a8f7","sha256":"91d98edce5753b0877f56015c0842d45aa0e034b4cc5c0690fc956715c8a4122","sha512":"877a4452c6906e17b048bc330774338e26b81deab68d842133c785911ffa7092cbbca648604f19d0f2954d5d73e75a8dc3329802cd3d2db84135382886b736e0","ssdeep":"1536:B9jkHX3kCk5J3+TAjNFFK8QGJTSjz7QXbxER:B9Ank55Jcn","tlshash":"fd33e896326175330bce915ba0b94207f72a64d4541a442cf07cdcef2a6de8873b6fb9","size":53789,"data":"","first_seen":"2026-08-16T07:47:50.042688Z","last_seen":"2026-08-16T19:35:37.000598Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DgO6pKae.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23d5d16b092ea668ece24ebf6d9ff3c8","sha1":"f3ba85985b0131c644f6a9071389a844fd16262a","sha256":"6748e9d6a2efca7f338e09b7135c8e03fd1687f04c645c7d784cc5a49ae55cdb","sha512":"d2cdcc1f3b482404b0ba0b3ebc91db3563542b6a58ca84ba1c9dcaa99fde59e9e0b78701cb536b97b66f7e47fc9e42b855f79b9a523365dbfda5ae95e901a801","ssdeep":"384:nm5RiAnGTLiEa/BoMJC+SBs/MO4G9ZpjvixCqNtI:knILihABot4G9ZxaxCqvI","tlshash":"3192b69532a5b031138ec46a80260543f32b75aa554bc03cb57ecdee27e5e8463f6b7a","size":19654,"data":"","first_seen":"2026-08-16T07:47:50.10439Z","last_seen":"2026-08-16T19:35:36.908233Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BzggenXN.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2bfeeb9c7c2ce3474a6e73623d522ad3","sha1":"a918dce9b7d02a863f8d3404dce6837c85ac2080","sha256":"ecd8d7ce92f0f9391d831786b3a2d235cd6e11277ecb24969f03232e02a546b6","sha512":"3217a3e101adf0dcca557266c25595c76bf4fd29f89518b9fbaac58d04b42da4c024d3026fb4c076a5977205b97c739f206d752d550f8b157724ce7eb2e548c9","ssdeep":"","tlshash":"cbf09eea70f1b0fa57f75c60d0305243826c7480e3454374e20d59811a6e099aa6df44","size":477,"data":"","first_seen":"2026-08-16T07:47:50.168803Z","last_seen":"2026-08-16T19:35:37.024021Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BpIiM6E4.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4ba6685ab03978cc468e4692260d5257","sha1":"f92fff2e590606624fefc6bbfe87bf9c0b3e2dca","sha256":"fdf4a81f4817c17c402f9b24619a27114a1575a0e2c6fa1167affddc492986b3","sha512":"67602d81edab1d0b4513e609b51506d005d9b35956f2f0be498f73aec58c0efca5e50f6f6ebfa51826471670647e076b11a261ec5ff14d1c97361af90a9ccb3a","ssdeep":"768:jedDYlp2C2BajcHMb3CWDzJdjP+8PHtfG4ZaOIPNeY+o4:8DV4cHMlv9MNS","tlshash":"7033c8497276b13006dda0ad94368543e31eb4c59404805fbabcfdde69fcc986abfa34","size":53420,"data":"","first_seen":"2026-08-16T07:47:50.067898Z","last_seen":"2026-08-16T19:35:36.944835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4185a51f4245981f78bc015164743a1","sha1":"619a76842f7b190a3ad64ee870ce1b63e5a3a3f8","sha256":"775bdce086cb91f88e6fa1328ccab78c3c41facf24813c03b53413eea57836f5","sha512":"9cc43b689ac4638a0aac0912f92d2355a88f0adc2c99707ed03b39b201a4304c9f666eabca1ee361ef1c91546c639a1a25aec497c69352ba5ad7494059baf5fc","ssdeep":"","tlshash":"72d02baa34d010b6627982f4b3b79b0834a21248541d8a22b54984542530e9a044a9dc","size":281,"data":"","first_seen":"2024-12-10T08:36:06.71629Z","last_seen":"2026-08-16T19:35:37.084765Z","times_seen":621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DyneDOU5.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6b31c806629ecdbdd7d20c821570806d","sha1":"a33f1ee797b9854f137fcb0d9b81591b5279f06f","sha256":"4a9325c34cade9ee412323a56b20fcd07d888873ab75a87e308cbe4b8b0220fa","sha512":"0ee03f68019825e1ecc270eebad8a47b0e7e1ca0c5667c124be05aada582ed03b28169baa27cfc93e77f2bcb4ecef4d8e0a3fa79b0121bbce11311c24ae310a6","ssdeep":"384:j3PvbCp5K0vRHQSFdESTT1FGo8KMzr/yUi8mviOHx8UBs41:k4GjESJiOHx8UBl1","tlshash":"0ca2c56937eab13142ee306e545b10015637acec98894494f621b087ec3ef8b71abf77","size":21971,"data":"","first_seen":"2026-08-16T07:47:50.109493Z","last_seen":"2026-08-16T19:35:37.027079Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","size":33544,"data":"","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-16T20:58:47.514238Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","size":446116,"data":"","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-16T19:43:09.329556Z","times_seen":3002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/polyfills-TZUJCB6R.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a0b6871600f84d9217bd90c46155a3e","sha1":"82b779d60bb4e65998c11deef491d3079b0b6ead","sha256":"030f429ef3142ee3cdc4d2fac9764ec04e16ce31165bb9ab46066216b9bf6015","sha512":"f1d4647db009d724f56209ff0ca0285d30ce5e04bc871ac580bebbf1969c967d2ca20dc97039de6007dc89295f87d9838153a41087a4d8bde18901874810ed48","ssdeep":"768:LHJR37IuiqJfVzIfTRA8cFyKi6scJduFl2+DP:LpdIRAfVScIKPxduO+DP","tlshash":"bc23868d7292f4ee07a3a5e9403f9806f3371874941dd169ebedd4d128b8e0d413abad","size":49615,"data":"","first_seen":"2026-08-06T11:09:01.876657Z","last_seen":"2026-08-16T19:35:36.999189Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D4H-4ih8.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e9e91f1928634bac8a6ff202660729d","sha1":"cd4e95d4c79417b4dd35d7fa501a16a1a5b0d2f4","sha256":"215af0240d0b4b886752a71f14caee1b8adcea8d6b2d23e31ea2ccf661a5d90a","sha512":"a8fe97af459769223f989ea430e5967cebfd6f2be60a9c47ecc47cfea6a6361276be73b77399675ec8117fa2c36912f65a40f96401de4225a1fd2f73f4884b75","ssdeep":"","tlshash":"e321ce8226f4bab711b27689c82f4145e114e5b550f8e1d4e344dab1e0d409b14daf36","size":1345,"data":"","first_seen":"2026-08-08T07:36:52.308544Z","last_seen":"2026-08-16T19:35:37.031848Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DC5oavYz.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7fb3811f1893169e66b98eaa3625a18","sha1":"51606cf4984e7d226f8e93097362a1851f8589ab","sha256":"d6faa8f89e0f4502c08f606efcbbab2af9730d52cdf638f4eccb7334772ac81c","sha512":"8803524c6c79adb950e6406e0112723942d94ffa561d2c47867521f4b0182b64f2385c62ea59933224b16f76a5119d4cbcf05612fcf422890062e6576b03ff65","ssdeep":"192:9qR57xFPzTFiodk3AReFxICnC5avW9kAW1WmxEkbY0VhWuOGYb9GDn8GS7+tRduV:E5VQb7Kk8o/bvVwu/7kK/k","tlshash":"1c022f9663e2f4b0930a103998794f02e20598c5aa4dfc7cfd2257d32536d8a647efbc","size":8496,"data":"","first_seen":"2026-08-16T07:47:50.080515Z","last_seen":"2026-08-16T19:35:37.042279Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Dm-QECkV.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ce2d41a2b126fbdbdb1b75de7c7c7ae","sha1":"2f190df5e926303f97bf63e17b101c817752c6cb","sha256":"db6bff9708f971e0816456f7537c1cdb15b7e4d9c149b91ac90f450921316fc7","sha512":"5fbc5f320d2705c1aa5444b4cbf720b2c4648d06f8081a7a8c8a30b14b3851a6fbb00ecb5a55dd8fcb47d2802207b763cdfc4d0bce9a0d9f4a70039fe081721c","ssdeep":"96:6tltCTqtzdHdCS8YEzergO0DqTzBGwk3/32eVojN4oTROOYRNRDvoRYRlvxBiTnt:63cTquJergOc3IK7M1p3","tlshash":"c12253f1b2917a7e216ac907015ad78a122f84a1d42393ad7115bcf84be7bde6364338","size":10522,"data":"","first_seen":"2026-08-16T07:47:50.072159Z","last_seen":"2026-08-16T19:35:36.96561Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CdkUFdL72.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37cbcb0487af2c2fb623e99848cbf402","sha1":"55f8df6210a355df9250c77ad5a9c63e3bc1f3bf","sha256":"6ba4149f098184ded4bffff17faa2a38a7b17c7882fcf7dc5221ab7504ed9394","sha512":"9d27072614fc62398ca9cd592846a522e70acbf7485315f717d8b5412da149e4e2da9158f07d0857f6069f181f13b8204d1efd14213842f6ea53ba974d174382","ssdeep":"","tlshash":"92219a92b9a4bc6f572ec72b5414010273ce7d8b2145d53dbb2936df60317206df56b1","size":1262,"data":"","first_seen":"2026-08-16T07:47:50.106044Z","last_seen":"2026-08-16T19:35:36.91154Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracker.ads.sportradar.com/dist/tracker.js","fqdn":"tracker.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aabe4acdb23c936870089af58cfefc81","sha1":"2749ee030e70cc99cb5de9e100c1b1b6cfe987fb","sha256":"2522e3f24f318e5c2d998482e9dbb933566aa4eb8b55bccbfff48c91505d27ba","sha512":"984d2c6b07cd8ffcd6efe8ca33109737bbc19d975da89dc1c2545d98361b3464ce2a913d8e033edcc6c5c240e1169c34b9d8b38c8cc0f92397641406cbb1536d","ssdeep":"384:8eCEybEpnGD6PNt+ZCACbjfMUohXmfrPNIHF45oCrZJLF4P1ayhy8NVb8duUCFno:8eCNCACsoeHF45oC0jokUCGGu","tlshash":"6fc2739cb1c1b0754697b175422f250fb2b6745564dad0e0e132ece0aef8c8d68a7f2e","size":28081,"data":"","first_seen":"2025-05-20T20:25:30.181667Z","last_seen":"2026-08-16T20:05:50.325057Z","times_seen":7500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PGLZXW7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17078a221ac057dcb8d6cbad9e8f2506","sha1":"2c37442cd93c1a76926db58d1ad9bd5f416c32a6","sha256":"e521af47b5e70b7e18be30d1e16d834ff1701f009fedad10da15fc9a58d20430","sha512":"829d60e98bbf3250a120fda229adb4f76a73e48ef66ec8c3a59a9b732abe0e65fd3417e4e3fd7ad619ca89452b3d3169618b5e3d2185efecc883eb56c9164cdb","ssdeep":"6144:2bNBD/1ESc0lXD82xJ0hcgLsegErl3POCY+Uy/N:2bP5lXFxR+Ue","tlshash":"cc8408cdb3da74669392a474503f018ba67e38e2f44cd895f089ccd42e74aaa5123f7d","size":405145,"data":"","first_seen":"2026-08-16T19:35:36.746419Z","last_seen":"2026-08-16T19:35:36.746419Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/ekr/snippet.js?key=3d1eecb9-289d-4841-8d37-987135ee659e","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2212d7d4bff592ce5ad0f95527713e85","sha1":"e982eaf7fdc71a87e03bffbedad8780ed58f4f85","sha256":"1da79e989f7ed098b77d20036920649850917664d9d5fc9f81e60af1f2767651","sha512":"c4870aa0742a4c023912637b9003ebd5b96b155e79db760265b4855355066541e72985d33df8d92f27e346651ffe459d2b57196efb158c17986b8f9ad4190109","ssdeep":"192:4TF0ROz77kD6B1c4QSZBxtjKkF2P5lQBbUMamqif8Xq1hyDZ8klCtsircTC:0FYOzfk+u4QSZYkIPnpc+G0DZ8kotsTu","tlshash":"e912d8c6b1b2e47603a600e1603a9690f7651919360dc43cf97cecd6fd66d91863beb8","size":9693,"data":"","first_seen":"2026-08-10T14:14:14.654591Z","last_seen":"2026-08-16T21:07:14.971967Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-C9Q6Kia8.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6144a1b256b9104232f32b9292bdbf5","sha1":"0e286342466f5d1c99b42daccb918c98a91fecbb","sha256":"2032502c52d3fedd898a53085c635c7d011a98306e4aa80fa4b9aba3ee94064e","sha512":"a50af499b11378306ba2c2b3bb5a9fad8c94838bc9534fe74c64c4e9fca1e5707e10af1d57a20ac92cf403f78788a27d02a498001a549c250bf432222b865a67","ssdeep":"384:HAxHnPIlBQL4X1A/ga67l+JcLdzbncQ6Lw3L9WgU:HARnPIlKL4ta5Q6Lw79WgU","tlshash":"229254d931f7e420438a821a96664593f23da9d4543a882cf7266cdbbcd4d0e47bfb70","size":20099,"data":"","first_seen":"2026-08-16T07:47:50.124588Z","last_seen":"2026-08-16T19:35:37.020444Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/main-6OO4IXHA.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f13d6220e937f8b0ec160e11ddec7e51","sha1":"653f05235a62ceed9ffd7afd1b3df30fee17d463","sha256":"78750d0be54815ee3bba2e33448faf91a70eedbbf144717d9c0f8a3c36a949ec","sha512":"87a565ddbe1cab13b8e968222d4f2e68592ec5f9f2828a883eea676779b31a520efa05369dca12dca70a1646622d6d69bbdb78bb75c0f7c2e67466b8b37652f9","ssdeep":"1536:ViPQzJzcuJamXZ5jVb+90xTh4chhZc2E4HlT:cG7n","tlshash":"6f631aab32e1b4754399853ad8274602f3275888150da03cfbed9cda75d5e4c62bfbb0","size":72243,"data":"","first_seen":"2026-08-16T07:47:50.175426Z","last_seen":"2026-08-16T19:35:37.00982Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CEQBuk-Z.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4c27c862c84ba63cab1a8754334fcf42","sha1":"4b62b18597ff05fc383d9d53a546e5dde1c34a56","sha256":"173796acc71dbc34525f5fc010a1b2d3d95826fb840b894a60481efec07f6fbd","sha512":"6fd2b89884963f7f8027d4bf2eb6500b203f432651bda25516774d28caf44be3640fdf6bbf044fb41379caf9220ba33d7392365c1015ec6e801d97a4a078bd0f","ssdeep":"","tlshash":"cf3110b3b2f9b1f406a9dc79c52166a183118529462d6739f2ec06c1239344daa9ef31","size":1707,"data":"","first_seen":"2026-08-16T07:47:50.118459Z","last_seen":"2026-08-16T19:35:36.927576Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DkwRRX3L.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4bdbf5903b591395f3135c7693946ff5","sha1":"d5dfb013e4e88e341730070ba4c076d7b11c7e25","sha256":"00c65ab0a567c3181b3dac098644b54da8cd7ef8266e9d53f2b8b623d8711001","sha512":"c576ee425d7c8b635f62f1f86c4341ea4949e384bb208533ab5df8316388d4876190958a076cfb3bcd6567e1be62946fbbd1eeb4a03f656a12a0f95be1fd776a","ssdeep":"","tlshash":"34e0c09fa09af07083a66dd6c0958207fd2c4bb6c2895358f11d1168336149af2fcf22","size":368,"data":"","first_seen":"2026-08-16T07:47:50.171662Z","last_seen":"2026-08-16T19:35:36.947521Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BJ6nIIe-.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56f5cbc1345202466e5183bb829f261d","sha1":"d99a7232438542c53385e028a0579cf919aae81a","sha256":"0821c2808e0b4fe73673f3f3167f2a54b094d5e3f4b36d97276cde2b58a08218","sha512":"cdc115079fbcb56274afe3cfeef843fa9bcd16720a6277d2b60b5631a0a3d46711692a04fd1c7f7b1d06d9c801165d8c927f05bf35f17cbc084e8d41a68e1cab","ssdeep":"","tlshash":"12d0a73585f87df211aa0ca48449d7870419a177e69f4254805a852947b4582a3fdb11","size":249,"data":"","first_seen":"2026-08-16T07:47:50.074578Z","last_seen":"2026-08-16T19:35:36.963873Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-7U-oK99H.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7864cf137e75e00ecd9318541d461868","sha1":"262ca8c56d401827edaa38f158367f8143872526","sha256":"8909f603fc2da550d53a1afb91bef7861643d18c96522e54e9b5fcb910113def","sha512":"e735200545f6e365894be151324680ae0baeb37f0de255d9e9028717e0bc0e83a70910e4c039c4458e3f23a7503e5fbbc1bb18c1c5aa7f6754d8693dfd55fd0a","ssdeep":"384:HKPKK0dLTIvZ7YTkFaQBvwkgRMZL4JDABn:UIA+QBvwFLlAZ","tlshash":"0762ea07b18cb4b8c0f971699ce31602967516cde85668acfa7edc880f75ccc60b7675","size":15364,"data":"","first_seen":"2026-08-16T07:47:50.140304Z","last_seen":"2026-08-16T19:35:36.910453Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Dw-w0y4c.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"92819d216527e4112dc06a25fe975776","sha1":"b1833d992f18bfe2935926118e44fb3d39cbc1e9","sha256":"dfd567532aa0c0701fcdab48d406a018cdca81e94ee7215e1436d0c45f145554","sha512":"c54585846a769747a7f040424d30ba13f8f2864cd182290360b5467e365b3d481d5ca356e3778c04fff83de91a4a19af7d7be399a18313ff9266d43dc9bc13cd","ssdeep":"192:Ar7MxohVPmlXb+sCrRXEOW4IpzN2G4CHOoZUdysDxJP9kCQRXx31T4rcbMLxFDmq:wss+mXEljpzN2GvQrzlkCwXhxa7/STS","tlshash":"dd42e546735236b482fd9166b8b7120012350259649c74dcb92c149abf8bc8db5fff7e","size":12830,"data":"","first_seen":"2026-08-16T07:47:50.170242Z","last_seen":"2026-08-16T19:35:36.919451Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-bPCEndxA2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a45360fddedb8f93d895c1e56c9ccf06","sha1":"f40bdaf381222c2cb380cc2d0c1898f9e27c2d74","sha256":"c9746a6ebfdcff9449e0d933ff04c39a766efe53feeef21aa1d0ac1b09382f86","sha512":"c5d12d71eb0cc82acfcd0df3127565b6265ce7308be20b66b016221ed129413e20d3855ff2031a2226a3bd4281e794a3f36c280f599bffe182db593ec2291358","ssdeep":"192:Defp5xJDE/B1pFzxw7TeZe3YiaiciObMP1xQp8dQ+doiiYht9q6kmES2TrTVFLq:kSe3Yh9cPUedQ+ddi7SkrC","tlshash":"4732e8bb31b424bd428dd4438c777397e2785094e10992ddf738a8cc25ead99e16837d","size":11909,"data":"","first_seen":"2026-08-16T07:47:50.046482Z","last_seen":"2026-08-16T19:35:37.010434Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D1VMXT51.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"23039be4691fa93102b8f0eaed9e1a82","sha1":"02128e618b8ee05e75766cfaa72ab0db386afbe6","sha256":"a677d47bea7ea06bccf9cf440838306d58af8f61a7a5b0895dd238b5d66f7abe","sha512":"f8f9ee013fac6a2ed20974c2720eb47bda94b0ebf6f219deceb4ea38b33a3570ae6e3dc9a02ca5998e51e637fb7684ba71721d74907369b5886036998a2b8068","ssdeep":"","tlshash":"6831649f3ca6ecaf7569d9a7f4124206b30d32019108803df72dacdf69b4c543a78a35","size":1829,"data":"","first_seen":"2026-08-16T07:47:50.144365Z","last_seen":"2026-08-16T19:35:37.022011Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Bli_dumf2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d4875bea3189f9ef6f66f8075f6d28a","sha1":"bb8dded3b85b95e59c4d00abd1060cc9b93ee8d3","sha256":"ece047599939c365db919185d2f2c60f0b0a920ba706b2f3279694a62ab9823f","sha512":"be2825325df249a61599abacb964b502c00a18f844e543b7a2bd8bff00f0dcd0e42679d419b9d1b06a8b65bd1f0ede0bd3e3dd668046dc66a7cd42d0697819a5","ssdeep":"384:0k3jykqngTKeAXH2vBDsfNT67JOia0KxaWy++HSf/BKn:p3jykIeAXH2efF61e0Rj","tlshash":"0e92d599231074b556df629642e88990a3b04880e40da66cb1f1cd9f1a7dc8827ffffd","size":20758,"data":"","first_seen":"2026-08-08T07:36:52.341078Z","last_seen":"2026-08-16T19:35:36.948575Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracker.ads.sportradar.com/dist//sp-3.8.0.js","fqdn":"tracker.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"902739d7e2c1e6b737f4f675c76baa27","sha1":"4157ca6a678984a5bee7a009d437970945022bfd","sha256":"bdcfff76b1a267221f3557b2eeb6b4b28f87eceefae0e25f328ef63c0cb1778f","sha512":"56fbd99c91efb7e7075224d34649f126d79bd14f0d3241471dd649691c9ab5f9f4a91f33792e5054146e2e115ed519beb6d2b94bb31fe54a164649baa6edb29e","ssdeep":"1536:KBw/RhMOVdG6MpORhWXnj/cPs+fS6xmpe:KiOXnj/7+fEpe","tlshash":"867329c976d4b06626bb31f5046fa10fb33eab85584dd440a621f5d43cb0a8f7267e2e","size":74143,"data":"","first_seen":"2025-05-20T20:25:30.164056Z","last_seen":"2026-08-16T20:05:50.354896Z","times_seen":7483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Bh00LLEw2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"664cbae53ca9355d24ee013f956ce9f7","sha1":"2c461a8672cbdd5468f238ec5d31c0812b79974e","sha256":"37b50e91a7c40f631e75fd6ea0611aebddde918d314eaa9c2760c89818798514","sha512":"583bf0e32d51892e66c899592d6b0338a6d76d40c633dd86ed3ba1337fe9425428f1af190427b879ba206cda071c8c11dfa6d9d9e42625eeb9656cd8905e358c","ssdeep":"384:8WOEN/5wiiXnNdy9IOIvcf18y78Ne8jOd2QObg+DJK+U0F1l5Uru7/JafSWmHY2+:8WOE1isrojOG7DJKg1lQ+Afl","tlshash":"4013cac4b36160a283d6e123c0b51503f329a5455809451cb768eefba9bdec971f7fb2","size":42089,"data":"","first_seen":"2026-08-16T07:47:50.134519Z","last_seen":"2026-08-16T19:35:36.912429Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DSf3iaAj.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ab5a843bb2fd9e4137a6d97a6ba2f73e","sha1":"ec308d74ea77c30085f1a06c2d0085d009f857b8","sha256":"6dedede36d6d96a3c882f67faa638312bd032e7117b638e15068cf93f9b86a79","sha512":"bee55b39bc631b4bee95b9da28178f613ecce2835d0b212ec7b5e7a3011e7d393b28b9ec344255c9ed5bdfb09a4e48c19b75d6d66806545dd7c545f5b49aa2cb","ssdeep":"","tlshash":"7741c20b717770b722faa424c8524701712549702749d23d7fec9ce0a6daacd724fbb9","size":2297,"data":"","first_seen":"2026-08-16T07:47:50.148059Z","last_seen":"2026-08-16T19:35:36.9134Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-qsAjmtwO.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b938c787eb7510968c9691a587fb97c4","sha1":"562053504d1114e70249a94dad83c2fd260cb0f5","sha256":"bbe6d77cbef342cd770e48c4efb3cb11acd67bede40ea54314b0f3e17620aaca","sha512":"af59a1d2f4d625326aa07a2ff3d548f091bfb7f6b4e0873c54ba7f7287219b51cee66c4bd5d4f90c86dfae1127d264402095fe10e5b5d70d087f5764a1f808a8","ssdeep":"768:bQ9jwWztVc0NJ3+INKZS7Eb2gTHZwYPOxjAJYYErzzsSxTbofjZRGbsIdaun91RV:ejxtVc0NJ3+INnYujQu5kb65Myx","tlshash":"a013a78373f574f003d967a16c244ac2e32688d8d88f895cf991b4cbed75c06a5b6bb4","size":45101,"data":"","first_seen":"2026-08-16T07:47:50.083472Z","last_seen":"2026-08-16T19:35:37.003179Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BywRv3-T.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b958981adbb1134aa8e2e2353ebd2830","sha1":"697c00850b0b8531df25936cd1eeb346e8fd5a3f","sha256":"3b1bae3e7e5749aafb71089689613468d12561dad0ea419de1c91eba67c36304","sha512":"d82a0c0e08ad60316676513fb91892f0eaafe92c4fe4dc31c37ca6690e987ef5df6fa5f2827acd39e3fc6c62e0c0f903c0dba0755070b0a829a88a1b282ed1bc","ssdeep":"1536:c2lnfppWhV+nr9doUpz50t4Kp+skZiW49h1D1WCuCTd3xb:5UV+nr9doUpz50t4Kp+skZiW49h1D1Wq","tlshash":"c243b4643314641183cfe11bc0b7060ba33a69468a0b815c72bc9def5b5ee59b27bbf5","size":57676,"data":"","first_seen":"2026-08-16T07:47:50.177006Z","last_seen":"2026-08-16T19:35:37.027685Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BtOASQzt.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a831a8f78d4d1371a4139d8f2cbd5a50","sha1":"0222f78780d21ae0bed87d86c72481bb7f00679d","sha256":"476bc6ea42e2942e552b116a5b9dd391ed4edcd995c9105ee35ecaf760886440","sha512":"8ffa5e11d637afe0f2cbf4d7773f95591688f773b79cba58a227d0967404f15e78a6a27cec0e10e109646465b48b00e597b28115e46860bbd88d62f63eb679ad","ssdeep":"192:RXjEF/bHFxELxSSIizLD9/Wa2aMJ+q3BL49aJEJxovpQNJAVx49JHi+2oco:RXI7bqSSfXBWWMJdMweJxovp88x4riTS","tlshash":"c832c66d733864334adf8c299437091bd74295869407007c32e8ddef56acc8d72aabb2","size":11346,"data":"","first_seen":"2026-08-16T07:47:50.167067Z","last_seen":"2026-08-16T19:35:36.926739Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BwOmbZNN.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"038812133d5ae9fa559ec8607fc84f0f","sha1":"90e7fc50319c21191d23a765e345b7c703eb133d","sha256":"4b31d77092bb4c45715aae276aa0b02e4afbec43cb1042c57ab559ac1616b266","sha512":"ad6bbace9a0e623f5a84868fca85de1d51338eeccc7b60630e32df0067c5c4d0ccea144d0de406f860bfc77b80d870aa68f446125c01d0e45100978b5987841f","ssdeep":"768:HV7uJpLxVw1GasMGCIsLQn77qgPGBm24iSHaaEjeXUmyykn56:17uJBw9xITqGHaaEjgSykn56","tlshash":"c97375d0d211377a3e67a69ad5e74626ffd4288c9811a468b0d05cfd8ed9fe8600e373","size":74668,"data":"","first_seen":"2026-08-16T07:47:50.181217Z","last_seen":"2026-08-16T19:35:37.004681Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BItWo34b2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b8294831cb15ee9233b80e77ebc2354","sha1":"5dafd24cccc7b2fb963f2b09dfa94dcbfe203456","sha256":"4c459ff0e713509726d2d9942bb91ce19eca034b7b4e817f515efa96d31a83c8","sha512":"1b2380c8279b4785d7c61ddb8556114fc85fb8de5e1a162f04a8eb65b9a4869fb56a4e42b6dadf856f54f220176aa7e1e61c4414aa42ad7463095e6eee2f7369","ssdeep":"","tlshash":"66f02e296052f4771ba8ca67642945d7f102f25142790368f304e4cd781fc9892f5435","size":461,"data":"","first_seen":"2026-08-16T07:47:50.069596Z","last_seen":"2026-08-16T19:35:36.996176Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-4mGUD9.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5dda9bb100735dfdfee91fe9fee80927","sha1":"03fe85929a07993141416fcf7a46782eafe51af2","sha256":"1d69446b5ca35d0531bfb46c191c7169115f1ab63c7e85dc642294dfffdd9076","sha512":"2fb896e6c7d4ac56c731a399abf46d85b170e9485d76d95116214c63b9ff2a63d300dca0b7e9661baa95271a7386e01b6481753e9b26686a89ff9f733c4b6c7f","ssdeep":"","tlshash":"3ae02bdd73f3b59557ca1716755e88dd564dc0826c19010cc056a1213854859e27cd26","size":386,"data":"","first_seen":"2026-08-02T10:38:03.994835Z","last_seen":"2026-08-16T19:35:37.032745Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-J0IlnoiD.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8576345991497c7e9eef98a9f65a4cb5","sha1":"c10b634eeede761353279fa21603a734e06267a6","sha256":"fc7beb961bc685292b1e9b444a1d535337dfc86f022f8b3db10f42d66809982c","sha512":"ca56eabce7f51070767f765c632a40443ed931cdedbd377edc78efc679a5c2ee15369c2bcee5ea3e1f9f0b17984d93817bffab46b23432b2e1bb08d2afdcbf57","ssdeep":"","tlshash":"691140aa95f0f0f11b64bd09c0812b038221349652045e6c343ce98a6aacc09fa7db22","size":893,"data":"","first_seen":"2026-08-16T07:47:50.064095Z","last_seen":"2026-08-16T19:35:37.01213Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Ghg8y4aw.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0c61c694daf548ccb98ae4482aa554fd","sha1":"9c4bda175c2a96711ad5f8ccb53915cd92159a47","sha256":"b1934b1702f3f53f47d2cc62751388fd5bc8862df2cc929fbfbfc0f2c006730b","sha512":"89160e39d86778796f1bb7b61696321836f6e9cf491db1cd40ff71bc621605d8ba170152231e83d5bb1f7e570025b5cf1c3cb87208c08b50bdae41a818cb64ce","ssdeep":"","tlshash":"60f07db675d3fdf8f03564dce41d86c6264af0d3c76db602541394906c5088c25b22aa","size":634,"data":"","first_seen":"2026-08-02T10:38:04.048404Z","last_seen":"2026-08-16T19:35:36.91819Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-JErO1Z4p.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"debafd6b3d855c9926f8d6bcc7ae2ed2","sha1":"c39f043afde87556baa28061d8f2cf1d18f7c516","sha256":"9f657dc9d611d810af7c853ad3f19aa8957873e3f2f1357e09fe3b84ff51af35","sha512":"a4e47c3d35f5f2dfe3d346e64416e1d65d27bd21abcac57d2cfb39aec8ed0996ba805b42c7743aeb738e5b247d8c7a10e3d77b727d29b9b117ba28d728ffa9fc","ssdeep":"96:2Y5cS509ZBmA2nq/QAK/hGUu8rZr1LDebm81Cn2W:j509Z0A2nqoAK5GUuAWSZ2W","tlshash":"3fb1c9b630c0b8da9357c4e6803fd38d52696067a53542ee342ee8ed66b1084bf3b039","size":5238,"data":"","first_seen":"2026-08-16T07:47:50.131433Z","last_seen":"2026-08-16T19:35:37.048334Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-j4z1qCMW2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b9c25c8c05601bbdbbf80c5fd0acf1a5","sha1":"089e6c2e1da7a7d99af250860614e3aa0730b2a9","sha256":"f7b69f676e0068ef0db00ddcd3c4a1bd4e5705c7080d2c1f826a578985e996df","sha512":"eae343e1d7db4d38868911fd0950b1f0ff93a3034aee15f31ca7d69bde4d6c9cff46a66b017125580c9d24046251da368f6e4ff44af7ad783c40c39f85ce1138","ssdeep":"192:CmQ2neXndiK5xZ5trdwfV16lsfvnJan6jKqNUIS8eo38IOCRVKCFSidoZ4I0:W2neXn+zuqBSS3/jRwC380","tlshash":"3d32f8b351e030f911a9cd48e806520242e67405d14ba21e7fae6cea52f9d8f7fac7b5","size":10971,"data":"","first_seen":"2026-08-16T07:47:50.123092Z","last_seen":"2026-08-16T19:35:37.079232Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CO0ipy3V.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"480d950e6110333b20cce7937d8f19b0","sha1":"06eb706e0354361cb917dc96c5a4327794783fd3","sha256":"af17fa621b37115e74ab905c9315ee384f44385e6caf0328be3070c4e206fcb8","sha512":"b5d1a5548c3d0da90586d0164d1cc7b17b11e9d7803606a07554aadc431a34d78e34af9b6d5f3bc497e02f84ca3c2c9f1be5ab6cb97749e355cc34dd37af9b83","ssdeep":"","tlshash":"2611dc8936a9f2b0d3b69a70802e130e723a77c9324b45c4c03c62912b21c74c1beff2","size":917,"data":"","first_seen":"2026-08-16T07:47:50.090494Z","last_seen":"2026-08-16T19:35:37.035131Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DzfqlSBc2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c54d7c0b37f9c25aff3f3932a45378f3","sha1":"11b6f3d354032ca323ea6a1f1a31adceb1534466","sha256":"0508950073628b5de6cc77127b57ea3caa4bb6edca62955b784eaa131d49d85d","sha512":"1f75d926ddc0639b3156deb44daf59708af1d46dd2361334028dac3224a11257a958fd7bfdebddc4956cb385f034312120f28aba45c4096fa457d179b6c6e51d","ssdeep":"1536:W04YX77i8vlHbYvDaWWD2RbCho/1bAbtVaztHSd7XiIbku4exxSkQ:We7XTCwM1sbgtHciyxi","tlshash":"49531999a230b53683eb124a9399c542b3e50884b88dc46c75f88c6b19bdc5c07feff5","size":66536,"data":"","first_seen":"2026-08-08T07:36:52.393174Z","last_seen":"2026-08-16T19:35:36.914418Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BMtTkFHS.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f995c46753e0382533e2b86d7bb1593e","sha1":"e30ae5ca736707be18c020e0453dd9906dd0013b","sha256":"28df8274c9462e858db3dc03e098f3459c11591901f0ef7b874e3da144caea7e","sha512":"310655d0089bbd1628eac2ae9de1ce02f8933e3831ee11e68c64118827e5a62865f505300f068000876ff738a7a5adf538c442842aeb0111471893f337085216","ssdeep":"3072:eNLawk9xm0cnxfLxSqz0trcRP6JvUAKg3YbN8:51m0eL0trcRPgV","tlshash":"48f307a433d2f02247da55a6c4770543f23b6885644d843cf628eceb3896e4992bbff5","size":160830,"data":"","first_seen":"2026-08-16T07:47:50.100538Z","last_seen":"2026-08-16T19:35:36.925223Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D45BYQ5S.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63dee350f59fcf390e707722b7d67ade","sha1":"6c409291d35e03f0236a71d6f0a63a31d06c8ea8","sha256":"c5283eacee210efd8624a1741a5890e32a6aa3fb81ae19dab3cd33d5dc1dd73f","sha512":"bffce96b5dd06c116ce5f6497cdd1259e7ca6dd05f881bec681cdec508ba6ccfa8107b185e03a0c5409ed804ec810461c3a2257ff0ed5e92e3f827bd83797e08","ssdeep":"768:mLC9NbZv60OCXzy121wNzeiZ3TLVoKmlvdBs6kWhKG7f93Y1ZTzuFiaSnko3bWv4:mLC9NbZv60OCXzy41wNyiZ3TaKmlNkWM","tlshash":"df13c4987190b4b61b6b9276807f450eb2373468984fd510f122e2cd3cb4e6da23fe5e","size":44294,"data":"","first_seen":"2026-08-02T10:38:03.939193Z","last_seen":"2026-08-16T19:35:36.929167Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-GqWASv.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6cd1986ae086b903fd3c624ecb1e75f","sha1":"b87ffcf6d5a519937cd2462ab02a670253b3385e","sha256":"94156e8c223d3e19154a6d1ae79cdf31c322f2324811b83c5bb3a5ebe59daa28","sha512":"7e9bfda410580ed3a3ee6e5f1ace649d373ff35435f17de163a8bc38522505fbafede74b138235a4e91c9dcf2976230c93e0e3d90757ddd7a346c312c4d49d8e","ssdeep":"3072:gRcuPgM9eZSeJDSFeJb7W0k+IX7CsSCUBYejVNdZ9JtddKta4RQNyXrSxb82vyZ:Fue+2AC7YiBZvdKI4RUrRyZ","tlshash":"bb24c5e836a5b02353de157a80bf0403f36968861c4e442cb168e9df7a71959a3f7f78","size":226504,"data":"","first_seen":"2026-08-16T07:47:50.151536Z","last_seen":"2026-08-16T19:35:37.041399Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CrQ7hky6.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0d31128d7fe92c209db2a9991f1b1846","sha1":"9b0eac7d5c15f84aff9f8710aeccd67f5f770426","sha256":"49c9bef56bba79e1649b983dc40dae757515e9540251e972cebfd694561be13e","sha512":"c6c5243dc2a5e7d43c9a9319a7f7dfb485e9d1ace7edf6c1a4fe42d3449bb212224b567792c32a162f2964a3cdb71326ae79c0afa80930fd08c1437388035fa2","ssdeep":"384:kK3nsDeSSDCOngeV9zP0+p1uITztPoLvc7DM9LkQhOdB5PyE2PvfeUJPm94NeSk/:kK0eS6nVOcU7OdBev+6D4Zq1xoCdv6","tlshash":"60f2d78633c2b67583dd60b7e8594342e2641a5c148f602df43aedde3d6850ae1bef39","size":34316,"data":"","first_seen":"2026-08-16T07:47:50.142499Z","last_seen":"2026-08-16T19:35:36.986432Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-sMBEZL8Y2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"79047d3ea7869b60a034c81df38359ae","sha1":"f676b01a2fd68b1e2e65c67e694712bf329a11df","sha256":"5fe9dee4d53251fdc82d22cc306605a31ab5d14b76e79e8a1a92f39a6c3ca3cf","sha512":"47def3134e09732cc6ebb963543d319ade7aa6cb00ebf309ed499ec768029741872509c8df01f833ab88c7c3d71ddab06d06b7d6815f67cc1314323a5dd2ca90","ssdeep":"","tlshash":"af2123152569f8ba527dcae2e410c712d2e42ad48508813cf23e9cd0f852c06737dff0","size":1117,"data":"","first_seen":"2026-08-16T07:47:50.155395Z","last_seen":"2026-08-16T19:35:37.028269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CePBU8n3.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39202815bc25964c11f2c98967ef9ef3","sha1":"1cd90d69f104ef57f749604248cd3c8c717ed883","sha256":"e204117a17b310885fa98fbb722a76187032a2d2f8dc743d5f43de56f2ce09fc","sha512":"39cc8ce137b28bed5ca37ec8f3b86f20709fdb78071a1202c50a7c6139e22fc980b46b44691da7a31a2fdc81d9119806286f4bd38e1b9dcf1767eea4b8365b8f","ssdeep":"3072:t03E4v8jbJ44M05EOrALYh7abLf6nxesec:Vb+4M05Ewa/Sxesec","tlshash":"d5e395f7b980b373b6e63918811a420c961ecc1aeccd540d9ee6f4db5db191434bdb2a","size":154848,"data":"","first_seen":"2026-08-16T07:47:50.162209Z","last_seen":"2026-08-16T19:35:37.047058Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D1zHvp01.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8468f91d9528f0a19711f23ea675dfba","sha1":"53ea4ef930db544c8660d7ebd9d39ffa64106f2a","sha256":"a2ee4274a40bc88199b86ab16d92b0898ece5b24c1b76357a78ecc5c1c0117c5","sha512":"7fd3c65a34f3848a46459bcf8b57ae1da4f47dd72517cb3621f005159f061da9f82ad36e5e0c752ae778b8bd6ae0b051fb1c89ebede466a62a67df30bbde8df9","ssdeep":"","tlshash":"273133c5828672b2c7bcd0e9647b6b82232c56b4259440fcf0b51fc17da440f77eaaa5","size":1605,"data":"","first_seen":"2026-08-16T07:47:50.146193Z","last_seen":"2026-08-16T19:35:36.992041Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/analytics/S_TBwiBBQfLpk6g-lTrMgMg3ou-dzKzyTQlCCUai7Ibye9q-","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ab0b26171220ef7f2c3f45e645a7b25","sha1":"3e1dcc233a692162c47e0a40c32fb89454c861ad","sha256":"cc47b7fb82a3e30e24fad0ae5ca096716250d3881eaf9e4939cea78b49c2f4b1","sha512":"3138ca587db96c67cd7b16c861495096bf486694cc1d8402524db99169e7ba2192cbc6c5d1b3d03bb1afcb49b0915f02aa0a57e7a46130de4f4489a81dedf462","ssdeep":"6144:mXsMXTBD/1ESJaC0XX3iRx9EOtYhcgLsegErl3POiPSZ/yMABqs0/xYN:WsOnaxXX+xbqSZ/sBqskC","tlshash":"a3b4f8cdb3d674625396f478503f01cba57b69e2b49cc89af089cce02e7459a4227f78","size":540506,"data":"","first_seen":"2026-08-16T19:35:36.726711Z","last_seen":"2026-08-16T19:35:37.028846Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAA2F","fqdn":"tm.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"239e9f59edd25c22baeb562b852bf43d","sha1":"cf72a155db6ccc18d91aaf358098764f3d8a257a","sha256":"2c37488e194d49cdd7fe4816b3f19e4813fd0f98ca0fe24da13b9ba68d6b799f","sha512":"4a62934dfdd870c5238ecec5af7dde1633fa3ac4b9b8bfdfcbd8270215d65741da06d657e99c71d5d34055c2f632b88637fc72de716a2c67c66ab330be3336d9","ssdeep":"1536:A1eBRfdvA2w2D5biYPXdiWutaiLSt/p7itiGdAtJ:A1S3BCNL+So","tlshash":"bf64658cf6a1f0714297b165402f410bf27da87a60ae90d0e365d8f4aef94de8673f19","size":334357,"data":"","first_seen":"2025-09-16T09:34:14.287564Z","last_seen":"2026-08-16T19:35:36.955289Z","times_seen":566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/analytics/","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29690376f57d108b8e1b9fdf789e2651","sha1":"fba02ff476ac81dd7c1cf5d017b874a3cbbd819b","sha256":"80d1f521306a4f23688a9c9b2da40cfed936f0f6be304e564c53389983bc0f31","sha512":"a462039a055c4771d7b618f490b6623a8df63659c7a9d9f749af20fd012ca605d49fef591fd9d8278c333abf52230c2f296a23ca1ca1dff4ba0c36a1647ca0c8","ssdeep":"6144:2brMXTBD/1ESc0lXD82xJ0hcgLsegErl3POCY+Uy/N:2brO5lXFxR+Ue","tlshash":"2694f7cdb3d674669392a474503f018bb67e28e2f44cd895f089ccd42e74aaa5223f7d","size":432478,"data":"","first_seen":"2026-08-16T19:35:36.827658Z","last_seen":"2026-08-16T19:35:37.021264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DFllOERo2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3233f23b97e16e8d6557495147e12688","sha1":"b8183fe2eab5540530ec85d910b39bd3254eceab","sha256":"2e69f2f37312d02b90c4bfffd897d1a6967f289616696fec9bafe89e90d625c0","sha512":"41ea44dbaff1e7ce0a9a905b3d8ae22cdbe4c5e33226b278bf8b9e5a358ba4156d6dfa87d99d3d20410b3ca873f89fb3e1a4671bf6f7fbb2cae07aa67c33c72d","ssdeep":"6144:bBt37Gh2OXOmm1QYflqgu42B2/kibjBnJ7G9auCcWSWM54+gN:bBt37Gh2OXbm1QClq4B9G98M0","tlshash":"bc241647ca7e1f798f42a390a31c30e7a37a91aca3f4d5e9b1abf5291585db6013c0c5","size":218796,"data":"","first_seen":"2026-08-16T07:47:50.114353Z","last_seen":"2026-08-16T19:35:37.07016Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-C1y0Kqzx.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db9e1ae2ba762638f446f81e39eca3f2","sha1":"126ff26143383b13f5be12ee60ea13fb41a9fc56","sha256":"a3bff259d044555f8faf9f94cbcfd6197da231a8f83fdb2c254893e2052fd149","sha512":"0c3c509681604ce208c5bde7848e1d11a4062329f4306bbd3c917639a65628f8ca5009edfdef94e3fb07f8245c93c51fd0195f7d2714b90342a2eee748ccaf9e","ssdeep":"","tlshash":"25e0f1a9719373319342042c420ec99a321ed40780290146f04884d03dd8c7043f5fa1","size":376,"data":"","first_seen":"2026-08-04T07:34:42.417871Z","last_seen":"2026-08-16T19:35:36.996949Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PGLZXW7\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","size":216,"data":"","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-08-16T21:07:07.377554Z","times_seen":36886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BpO5OIrs2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fc7563a280c5abf16d587774bc831289","sha1":"28ca2e5468fad1cfdf654fd00cdfcf4a4dc08077","sha256":"5b083b9658d1155751f3ee9ffaed2d4bc81e40ed88f7075272f6b10ea8077260","sha512":"226a22e397fd3af3201fc1a4aeba0fd4b8d4e5bfedbede0743bc51cf8228fea5086cfc45d43e6fd3f8ce1779f4d9728c5d2de9701b96981984393625cfdc065f","ssdeep":"","tlshash":"9cf002e364fdb0b002668cead0348323a6003a9743464034e0ed5abb2de5cc197ecda6","size":608,"data":"","first_seen":"2026-08-16T07:47:50.178597Z","last_seen":"2026-08-16T19:35:37.011011Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.growthbuddy.app/tag.js?id=DV-32994169366256167699","fqdn":"tag.growthbuddy.app","domain":"growthbuddy.app","tld":"app"},"ip":{"addr":"18.200.119.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5dcf30251141b544e6353e5bbf04a6","sha1":"f83c0c8f2e01eef41cf0fb41fa260f495bf9377c","sha256":"56a317053688f59ca2544ed7c8dd9ab6b9bebe4f75ed9518e8362762ae19270f","sha512":"e20ce742f58cfb1214c45c74fb72d42617f75ab40dabb618a5ec5c4367fe751cffb902865ae3c30c21719e67b7cfd39282c8c0dbd2efa36cf0f5a1124521d44f","ssdeep":"96:zDE5M3fZeoaaM6NqnU4GYP1jAb4VqoYbGPZK0meTaLFd1d7wdq3skqIXh47dDT67:zDE5CfpaoNqnWZonBK0m+8N5wg8tW4xC","tlshash":"e7d1739b76d4a0ba51a95563afbf338b142375aa2c04841c7115ece7dd6ce4b001be7c","size":6241,"data":"","first_seen":"2025-02-27T10:02:15.039681Z","last_seen":"2026-08-16T19:35:37.001696Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-eqwUEIQ5.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61cc7649b961ca165db15b707cb3b169","sha1":"e4ced2ec7a2fc714b771b1115668e593704f09a2","sha256":"099a0fb42436b09a529c7c598c7849e4a0e274e6e663472063dca2abd0d9d3fc","sha512":"791ebc73d321bbc38a0b70915fc5d9ade04c905ef2f6040bc1fe507f657b04638707e6512692f9ea3fa485506c588693866797a901cee9b904914e2af91c6a86","ssdeep":"","tlshash":"37f0c0ef31f072322bdb0936c1ab144aa33831205c2e5810f334e081b934eb52735d5c","size":542,"data":"","first_seen":"2026-08-02T10:38:03.983475Z","last_seen":"2026-08-16T19:35:36.917346Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D2VoIFV7.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5fe1d1db4af0777aef59f3a83a53ea4","sha1":"5a92ca52804dd0a3423318d5537f1bbb8feb2c4f","sha256":"62876ef43effd173d449437f726b0f02bfe26762e32c1d457bbbe3925eb5eb6f","sha512":"1df36a6ec5c12c25264f7837554e43e89db5757a06e99506444d70a7df72ca042eda367d597741db9692e07502e23d0ef2154e6091d601746c14668169f7c65c","ssdeep":"96:pWrWJWkWb7uGeLPqE2WkvLXUvUW7GsDpNKD41GBYcMhrkfs:4CYfPuD2WkDXUvUW7GsDpNKD41GBxOys","tlshash":"09d19d8133f37544838e426ab4a01de2a1940dd444297b7af858f64eeeba4c5d0f7be5","size":6391,"data":"","first_seen":"2026-08-16T07:47:50.165392Z","last_seen":"2026-08-16T19:35:37.047694Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DfYz95Oc2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"edf7be5b2d74d8618a8d9c2e16f952b6","sha1":"f2f6d46b7cf6b88994e590627739df8b178ac6ef","sha256":"5951d22cea0fc90bf15245bdc8bdc1627dbe4a6339d03798d1066ca22dcc0976","sha512":"63e62b349376b8b3a5888efa1b53f7bf837d037eaa67e089132945e8b9bc108b69f50fc21c3b912bcea5b476c2fadf64dabf99495e51c406894aed9fe0b4db60","ssdeep":"","tlshash":"ec21125b71a434f2869cd8f8c62f57524326b0910928233dba8d6ddf01e5c4ab72ef32","size":1296,"data":"","first_seen":"2026-08-16T07:47:50.111077Z","last_seen":"2026-08-16T19:35:36.928418Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DztEB1jO.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e231f17da091621529dcbb430bcee234","sha1":"89d22616ae083716bd85fb37eb892def3e40f043","sha256":"6e2324a453be62fc32a518ffb7624331f05b2a81ffa285c227cea1d6e29d1f63","sha512":"1f874c58c0da687576a9c0427f87af3df2c1732f55cab99200a73f21bcf0b3704786e96e7cda118978400863cbc1889b0d19cebe6b14002e0e43932e7d13f1ab","ssdeep":"","tlshash":"8951f18a3165f87304ccdd57f0a362d661562098901e009c76adbcea23f8dd9672eb36","size":2442,"data":"","first_seen":"2026-08-16T07:47:50.149818Z","last_seen":"2026-08-16T19:35:37.030542Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Usage of true/false is not recommended anymore. Please use 'all', 'functional' or 'none' instead.","filename":"https://static.zdassets.com/web_widget/messenger/latest/web-widget-main-a211b31.js","line_number":2,"column_number":509005}]},"http":[{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_top_8567edf18a.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.461Z","timestamp":1786908875461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_top_8567edf18a.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 25 Oct 2022 05:23:35 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"635772d7-9fa\"\r\nexpires: Thu, 29 Jul 2027 02:36:16 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1616299\r\ncf-ray: a2c2e0979f5ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2554,"size_decoded":2075,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b2e46a90688ed6d4243a9ace9ffbc8d","sha1":"7983efa03bef1bf42d09d5525ecdc322e6756749","sha256":"d06b95d352d03ff3c9f3650d4c33133dcc240cbe307e2338fac6b798d739b5db","sha512":"c83da4eae8e1290afbbffe4057ebec605058ce5209b60e3423d7478754944a7b1d36512b571181f4eea149565eb0d54f50583cd21be33c7f6c3146060f1dddce","ssdeep":"","tlshash":"39513f5613c50220e30b4694ebf03d9a1bf63097d7da4d94a330bc61a8f3c743aa8b9c","first_seen":"2025-06-19T22:33:41.525735Z","last_seen":"2026-08-16T19:35:37.013564Z","times_seen":608,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/download-app-galary.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.477Z","timestamp":1786908875477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/download-app-galary.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1682297\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Wed, 28 Jul 2027 08:16:18 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-11dd\"\r\ncf-ray: a2c2e097af6bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13717,"size_decoded":6467,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a873cf9164bf0c6ff596e9f40d3f6944","sha1":"3114070a3d65771fc83902de3512ec417ca1bf98","sha256":"a879e30680ee47e0964c26eacb80a1309888b1515f026864b7943bae0e65793e","sha512":"551059cd994765becb1a863c2e34968bcf0e814d7ef87e80b241f0823c2cf8a9097b1566e03cbf8e2c377e4baf23fdd17593455d09eede0ff84494d81caa5ca4","ssdeep":"192:+1/2z3gChhrzU+4XdIpXGU9nkUhPExs2lZ5VsvqKj3RKu/3mLPAu1fQKplXeW7Fa:+MhLiIpXGU9kUh+pdFW7/3m1QylXB7Fa","tlshash":"ca52a3c9377692e8f608f7f4da1518797e2f28f2ae97c5a4c7a51d41ba0116ecc248c2","first_seen":"2025-02-27T10:02:14.96267Z","last_seen":"2026-08-16T19:35:37.051451Z","times_seen":453,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Dm-QECkV.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.547Z","timestamp":1786908875547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-Dm-QECkV.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:11:00 GMT\r\netag: W/\"8ec-19ffb3f56a0\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0982f9fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10522,"size_decoded":3819,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (10336)","md5":"8ce2d41a2b126fbdbdb1b75de7c7c7ae","sha1":"2f190df5e926303f97bf63e17b101c817752c6cb","sha256":"db6bff9708f971e0816456f7537c1cdb15b7e4d9c149b91ac90f450921316fc7","sha512":"5fbc5f320d2705c1aa5444b4cbf720b2c4648d06f8081a7a8c8a30b14b3851a6fbb00ecb5a55dd8fcb47d2802207b763cdfc4d0bce9a0d9f4a70039fe081721c","ssdeep":"96:6tltCTqtzdHdCS8YEzergO0DqTzBGwk3/32eVojN4oTROOYRNRDvoRYRlvxBiTnt:63cTquJergOc3IK7M1p3","tlshash":"c12253f1b2917a7e216ac907015ad78a122f84a1d42393ad7115bcf84be7bde6364338","first_seen":"2026-08-16T07:47:50.072159Z","last_seen":"2026-08-16T19:35:36.96561Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.optimove.net/v2/websdk/?tenant_id=838\u0026tenant_token=2a507747f34943e8b978b5d3e7a04db6","fqdn":"sdk.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"136.110.164.149","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.742Z","timestamp":1786908875742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"GET /v2/websdk/?tenant_id=838\u0026tenant_token=2a507747f34943e8b978b5d3e7a04db6 HTTP/1.1\r\nHost: sdk.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncontent-encoding: br\r\naccept-ranges: none\r\ncontent-length: 42711\r\ndate: Sun, 16 Aug 2026 18:47:38 GMT\r\nage: 2817\r\netag: W/\"66511-R+FPnQi/puRySDIRShjo/lSZY6Y\"\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=3600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":419089,"size_decoded":43187,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df529cc18765f0a77d739316eabfb1df","sha1":"47e14f9d08bfa6e4724832114a18e8fe549963a6","sha256":"cb0de0f4eabfb68a47c9421a4c0e69fc8ac3a80ec25294389269e5ee54441218","sha512":"8d1ebec9158f2db116ad6b800e413f3f28c379cb36ccc797b582d980ba6a165e1bf7509e211a6233b4c26d528d56b9763dad3b9bada9212eeefc8b8057008d92","ssdeep":"6144:pQlS07BXqwHkRYFoR0yIhTEM7Dj54iAJjYkJgFuCb:OlPoRtgEE","tlshash":"8194758913299d7e91d751e8e2c63b0b1abd2bb7718418f4f0b56ea4f0fba4a0113717","first_seen":"2026-08-16T18:36:25.808228Z","last_seen":"2026-08-16T19:35:37.016107Z","times_seen":3,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":14,"receive":15,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdkuaservice.optimove.net/","fqdn":"sdkuaservice.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"35.190.123.216","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.873Z","timestamp":1786908875873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sdkuaservice.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-length: 361\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'self' *.optimove.net\r\nserver: Optimove\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":361,"size_decoded":717,"mime_type":"application/json","magic":"JSON text data","md5":"a7052823239eb8991fc09e127600379e","sha1":"d6e3a4299c197ce52730da141b98b63ff19acfde","sha256":"affbe9f7a56b16c5a74c4affc16f15dca80482eebbc1c8b621b8445deccae7f0","sha512":"fffc117332849565190d2fc257d1aeb59c95105f8fe34c4361fef65785906b4ab28a2961d71f038fd60a4fe2bc00f350f84562fb122bb5831d02ec03456561d9","ssdeep":"","tlshash":"79e04f76c8745ca389dd4621107b9342f7b0085b995d3d28b686240cbf9dbbf20b9ad8","first_seen":"2025-02-05T17:12:35.767748Z","last_seen":"2026-08-16T19:35:36.989938Z","times_seen":2206,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":21,"connect":13,"send":0,"wait":117,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:46.678Z","timestamp":1786908886678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-locales/messenger/en-us-json-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: OME3VlTVFKcUL0RwoUsb8Jqxo6/CNwrdSaiMitlsS/rDsZukVhMFBUchoTyxqlfu+e0yv7W4IX8=\r\nx-amz-request-id: JXJYKW77FD66NQXA\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:31 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:30 GMT\r\nx-amz-version-id: MdCZ9Dv7.RWsF6I8Jda21BqMbhI7Etk7\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 296893\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sFBPlENuktQoccdqU0DcQPymE3K7hY7n93KlRCbilnYr%2FoHIzlmggbKgpRbe1VFI8m352jd%2Fyv0bxHcGf%2ByjldKgckXGVUG0jRkyy60JLbiOIlNTCLbteOrxjVRpn2Gvb6plh0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"c7812d994024348872d0272fda770adc\"\r\ncontent-encoding: br\r\ncf-ray: a2c2e0ddbf8f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33544,"size_decoded":6735,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33528), with no line terminators","md5":"c7812d994024348872d0272fda770adc","sha1":"56b73da3f78db507ed9420bc80deec38e6af8580","sha256":"779aae95cf20e6bc6e834381ba79df0d92976f7623a6d589eaa0d815d42de448","sha512":"95db91b74b993128dcc1950ec06a11e3c8ad1bf5f023da2fb13f4850c5fff62c1749057687160133c922b71f59e6e39c3f3a1d9a2fd097df60eb257b993018d8","ssdeep":"768:vEVoMZVXq2LHAmhmksmQm9YMRtM8bHIZAZsyb0TvYJI+rT36kdvWo0K5u:vtAZsyqH1","tlshash":"eae23c3b449ca51f3f75a681bc45b24eb7ab9500bd8c4778f4869c0e93acd1026fbb49","first_seen":"2026-08-04T14:24:23.13476Z","last_seen":"2026-08-16T20:58:47.514238Z","times_seen":272,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D45BYQ5S.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.354Z","timestamp":1786908875354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D45BYQ5S.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 1427794\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 31 Jul 2026 06:20:11 GMT\r\netag: W/\"36b1-19fb6d48d78\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef31b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44294,"size_decoded":17305,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44202)","md5":"63dee350f59fcf390e707722b7d67ade","sha1":"6c409291d35e03f0236a71d6f0a63a31d06c8ea8","sha256":"c5283eacee210efd8624a1741a5890e32a6aa3fb81ae19dab3cd33d5dc1dd73f","sha512":"bffce96b5dd06c116ce5f6497cdd1259e7ca6dd05f881bec681cdec508ba6ccfa8107b185e03a0c5409ed804ec810461c3a2257ff0ed5e92e3f827bd83797e08","ssdeep":"768:mLC9NbZv60OCXzy121wNzeiZ3TLVoKmlvdBs6kWhKG7f93Y1ZTzuFiaSnko3bWv4:mLC9NbZv60OCXzy41wNyiZ3TaKmlNkWM","tlshash":"df13c4987190b4b61b6b9276807f450eb2373468984fd510f122e2cd3cb4e6da23fe5e","first_seen":"2026-08-02T10:38:03.939193Z","last_seen":"2026-08-16T19:35:36.929167Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CO0ipy3V.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.491Z","timestamp":1786908875491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-CO0ipy3V.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:09 GMT\r\netag: W/\"1d3-19ff1fa6dc8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf77b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":917,"size_decoded":1639,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (825)","md5":"480d950e6110333b20cce7937d8f19b0","sha1":"06eb706e0354361cb917dc96c5a4327794783fd3","sha256":"af17fa621b37115e74ab905c9315ee384f44385e6caf0328be3070c4e206fcb8","sha512":"b5d1a5548c3d0da90586d0164d1cc7b17b11e9d7803606a07554aadc431a34d78e34af9b6d5f3bc497e02f84ca3c2c9f1be5ab6cb97749e355cc34dd37af9b83","ssdeep":"","tlshash":"2611dc8936a9f2b0d3b69a70802e130e723a77c9324b45c4c03c62912b21c74c1beff2","first_seen":"2026-08-16T07:47:50.090494Z","last_seen":"2026-08-16T19:35:37.035131Z","times_seen":4,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-J0IlnoiD.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.497Z","timestamp":1786908875497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-J0IlnoiD.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 18:01:07 GMT\r\netag: W/\"1f0-19ff1fc3ab8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097df7cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":1681,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (799)","md5":"8576345991497c7e9eef98a9f65a4cb5","sha1":"c10b634eeede761353279fa21603a734e06267a6","sha256":"fc7beb961bc685292b1e9b444a1d535337dfc86f022f8b3db10f42d66809982c","sha512":"ca56eabce7f51070767f765c632a40443ed931cdedbd377edc78efc679a5c2ee15369c2bcee5ea3e1f9f0b17984d93817bffab46b23432b2e1bb08d2afdcbf57","ssdeep":"","tlshash":"691140aa95f0f0f11b64bd09c0812b038221349652045e6c343ce98a6aacc09fa7db22","first_seen":"2026-08-16T07:47:50.064095Z","last_seen":"2026-08-16T19:35:37.01213Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/common/providers/pragmatic_play.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.512Z","timestamp":1786908875512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/common/providers/pragmatic_play.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 12:27:07 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"68c2c01b-c55\"\r\nexpires: Thu, 29 Jul 2027 03:36:12 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1612702\r\ncf-ray: a2c2e097ef8bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3157,"size_decoded":2471,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6860848f2dda288341638e16c92156b6","sha1":"6bc8aefa0243e53117ac5740c3a5f878f29e9ac2","sha256":"33b1249a1887f28fc1d35308c38298b7797aa8454a924869add8dbcfbcc6c76d","sha512":"971d92a978ea3bdaa443f85c74ebdeead45b8e30f02cd75a5eec7a6b32663d9c3417c5bfc8080d0c9a3cb71c2da14f1899db66b209405a64aa61b05dc7c76877","ssdeep":"","tlshash":"2f51117adb6d65bc5c0b07e4163582b42b9f58be7512c3b07a7c82b1a343e4cc463aa5","first_seen":"2025-09-16T09:34:14.156818Z","last_seen":"2026-08-16T19:35:36.91579Z","times_seen":338,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/responsible-gambling.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.515Z","timestamp":1786908875515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/responsible-gambling.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1446549\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Sat, 31 Jul 2027 01:45:25 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-1124\"\r\ncf-ray: a2c2e097ef8fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12001,"size_decoded":6199,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f8ddb0a41682d9435f89edb8f63226b","sha1":"e072b43a1f664554351b2d348c8f9511bd555bb5","sha256":"4cd278a8e117a2af5196ee7b7eb6125317c2a954a029afbbb7275612ae243221","sha512":"27810bb2ea22c5b7da6def771216f75c3b4d2a817b6b0c702fb70e0ff05b4a9dc798d455819e7da20d2114d4df105729a30481eacc54cf409d3cff0b17901705","ssdeep":"192:IpRnvmKA2DByID2oLMtW0MF+7YJiwWTdATwgZdu26FHKW1kEImEuE:IT9DBkoAMF+gmewgZdkFHhk2E","tlshash":"cd420cbb236857feaad15b040896618f37e18857b1fad1eccf6398a6ac056f34174c30","first_seen":"2025-02-27T10:02:15.023979Z","last_seen":"2026-08-16T19:35:36.994845Z","times_seen":356,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BItWo34b2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.553Z","timestamp":1786908875553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BItWo34b2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 380376\r\nlast-modified: Wed, 12 Aug 2026 06:54:42 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 12 Aug 2027 09:54:59 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7c18b2-13b\"\r\ncf-ray: a2c2e0982fa7b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":1424,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (365)","md5":"2b8294831cb15ee9233b80e77ebc2354","sha1":"5dafd24cccc7b2fb963f2b09dfa94dcbfe203456","sha256":"4c459ff0e713509726d2d9942bb91ce19eca034b7b4e817f515efa96d31a83c8","sha512":"1b2380c8279b4785d7c61ddb8556114fc85fb8de5e1a162f04a8eb65b9a4869fb56a4e42b6dadf856f54f220176aa7e1e61c4414aa42ad7463095e6eee2f7369","ssdeep":"","tlshash":"66f02e296052f4771ba8ca67642945d7f102f25142790368f304e4cd781fc9892f5435","first_seen":"2026-08-16T07:47:50.069596Z","last_seen":"2026-08-16T19:35:36.996176Z","times_seen":4,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/analytics/S_TBwiBBQfLpk6g-lTrMgMg3ou-dzKzyTQlCCUai7Ibye9q-","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.735Z","timestamp":1786908875735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /analytics/S_TBwiBBQfLpk6g-lTrMgMg3ou-dzKzyTQlCCUai7Ibye9q- HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a2c2e0994802b28a-OSL\r\ncf-cache-status: HIT\r\nreferrer-policy: no-referrer-when-downgrade\r\nage: 1158\r\ncache-control: private, max-age=900\r\npriority: u=3,i=?0\r\nexpires: Sun, 16 Aug 2026 19:15:16 GMT\r\nlast-modified: Sun, 16 Aug 2026 19:25:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540506,"size_decoded":182738,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"2ab0b26171220ef7f2c3f45e645a7b25","sha1":"3e1dcc233a692162c47e0a40c32fb89454c861ad","sha256":"cc47b7fb82a3e30e24fad0ae5ca096716250d3881eaf9e4939cea78b49c2f4b1","sha512":"3138ca587db96c67cd7b16c861495096bf486694cc1d8402524db99169e7ba2192cbc6c5d1b3d03bb1afcb49b0915f02aa0a57e7a46130de4f4489a81dedf462","ssdeep":"6144:mXsMXTBD/1ESJaC0XX3iRx9EOtYhcgLsegErl3POiPSZ/yMABqs0/xYN:WsOnaxXX+xbqSZ/sBqskC","tlshash":"a3b4f8cdb3d674625396f478503f01cba57b69e2b49cc89af089cce02e7459a4227f78","first_seen":"2026-08-16T19:35:36.726711Z","last_seen":"2026-08-16T19:35:37.028846Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-4mGUD9.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.484Z","timestamp":1786908875484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D-4mGUD9.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 1427794\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 31 Jul 2026 06:20:09 GMT\r\netag: W/\"f3-19fb6d485a8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097bf71b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":386,"size_decoded":1369,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5dda9bb100735dfdfee91fe9fee80927","sha1":"03fe85929a07993141416fcf7a46782eafe51af2","sha256":"1d69446b5ca35d0531bfb46c191c7169115f1ab63c7e85dc642294dfffdd9076","sha512":"2fb896e6c7d4ac56c731a399abf46d85b170e9485d76d95116214c63b9ff2a63d300dca0b7e9661baa95271a7386e01b6481753e9b26686a89ff9f733c4b6c7f","ssdeep":"","tlshash":"3ae02bdd73f3b59557ca1716755e88dd564dc0826c19010cc056a1213854859e27cd26","first_seen":"2026-08-02T10:38:03.994835Z","last_seen":"2026-08-16T19:35:37.032745Z","times_seen":10,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-7U-oK99H.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.493Z","timestamp":1786908875493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-7U-oK99H.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:48 GMT\r\netag: W/\"eba-19ffb3e3d60\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf78b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15367,"size_decoded":5657,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (15260)","md5":"7864cf137e75e00ecd9318541d461868","sha1":"262ca8c56d401827edaa38f158367f8143872526","sha256":"8909f603fc2da550d53a1afb91bef7861643d18c96522e54e9b5fcb910113def","sha512":"e735200545f6e365894be151324680ae0baeb37f0de255d9e9028717e0bc0e83a70910e4c039c4458e3f23a7503e5fbbc1bb18c1c5aa7f6754d8693dfd55fd0a","ssdeep":"384:HKPKK0dLTIvZ7YTkFaQBvwkgRMZL4JDABn:UIA+QBvwFLlAZ","tlshash":"0762ea07b18cb4b8c0f971699ce31602967516cde85668acfa7edc880f75ccc60b7675","first_seen":"2026-08-16T07:47:50.140304Z","last_seen":"2026-08-16T19:35:36.910453Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/social/x.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.507Z","timestamp":1786908875507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/social/x.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1585663\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 29 Jul 2027 11:06:51 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-b6\"\r\ncf-ray: a2c2e097ef85b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":1277,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec9781a4c1c0b9c8f98fdf978dc44993","sha1":"81f22e77c5d27a50f5e6d4f217a8e02a0224654c","sha256":"3880a46eb1c1893f9ef5a67ac7fd0ec572b89d71b649a29bc43a39caa1665c51","sha512":"830b81b4db631381610cc17d50cffc721f99b5839dc647d8bb799d701064bed00e7defcadfecbf081584824f9d2d3c6e5954e784f476416bd9bbd953206fe46d","ssdeep":"","tlshash":"d2d05e50a769ec2082848f2146f8ca5677aba25341d3196df9e019428e14ca94a6969a","first_seen":"2025-11-12T21:05:12.58018Z","last_seen":"2026-08-16T19:35:36.967161Z","times_seen":325,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAA2F","fqdn":"tm.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.739Z","timestamp":1786908875739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tracker.ads.sportradar.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 23:21:20 GMT","end":"Tue, 08 Sep 2026 23:21:19 GMT"},"fingerprint":{"sha1":"9C:C7:08:07:E9:4E:80:B9:77:1E:FB:41:52:2B:0C:47:76:CE:AD:80","sha256":"14:69:9B:2C:8D:43:8D:61:B8:D3:F4:E2:16:98:52:FE:36:A1:48:21:7B:0C:85:44:F5:1B:7A:1C:6E:21:07:80"}}},"request":{"raw":"GET /dist/tag-manager.js?id=STM-AAAA2F HTTP/1.1\r\nHost: tm.ads.sportradar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 33879\r\napigw-requestid: CNVmlj4qjoEEMag=\r\ncontent-encoding: gzip\r\ncontent-disposition: inline\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: WxzUZikfyllO_FnhO2IS5Qg7cGpZgNhMD_allMx_VcfYJr9MpKWsVQ==\r\nvary: Accept-Encoding\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncache-control: max-age=900, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":334357,"size_decoded":34254,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62017)","md5":"239e9f59edd25c22baeb562b852bf43d","sha1":"cf72a155db6ccc18d91aaf358098764f3d8a257a","sha256":"2c37488e194d49cdd7fe4816b3f19e4813fd0f98ca0fe24da13b9ba68d6b799f","sha512":"4a62934dfdd870c5238ecec5af7dde1633fa3ac4b9b8bfdfcbd8270215d65741da06d657e99c71d5d34055c2f632b88637fc72de716a2c67c66ab330be3336d9","ssdeep":"1536:A1eBRfdvA2w2D5biYPXdiWutaiLSt/p7itiGdAtJ:A1S3BCNL+So","tlshash":"bf64658cf6a1f0714297b165402f410bf27da87a60ae90d0e365d8f4aef94de8673f19","first_seen":"2025-09-16T09:34:14.287564Z","last_seen":"2026-08-16T19:35:36.955289Z","times_seen":566,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":45,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/fonts/open-sans-v26-latin-600.woff2","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.337Z","timestamp":1786908875337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/fonts/open-sans-v26-latin-600.woff2 HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=2,i=?0\r\netag: \"6a684f39-414c\"\r\ncontent-encoding: br\r\nexpires: Thu, 29 Jul 2027 11:23:57 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 1584637\r\ncf-cache-status: HIT\r\ncf-ray: a2c2e096df0fb28a-OSL\r\ncontent-length: 16716\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16720,"size_decoded":17835,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16720, version 1.0","md5":"76b76d22b1d61e7a50ad59d70b8de239","sha1":"77ab1371e21c28701b4916d693ca2c4b096de23c","sha256":"8316cc0bbf51111203a3845168a27b91eb9cd6c0bd4863b7211b56b65dcff32f","sha512":"1e45781c07f6bb0567788f6789e648f3d053f51beeac125e0ac35e88eb59bc8cde82751ff8d5580323334a6fa5ea225c4f201af06a34049e27aac7c12a6bdf41","ssdeep":"384:9/t09cjCjVDJbPih+nKAoG6UFjwZ1OyrcaKmY:7AcOG8p6jKl","tlshash":"b672d08c8c397ad8ca0d062eb7545502d58f2b2221b9973127515adf6f880bd0f6f6d8","first_seen":"2023-05-07T17:30:13Z","last_seen":"2026-08-16T19:35:36.968502Z","times_seen":813,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-jOTT0c.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.343Z","timestamp":1786908875343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D-jOTT0c.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:45 GMT\r\netag: W/\"aff6-19ffb3e31a8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096df15b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225946,"size_decoded":56909,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (13670)","md5":"f5724ae4212bb59cb1cbb91042a839e1","sha1":"488ec6e870264bf090bfb7e7a5b2783562bddbe7","sha256":"ada4d07cda421517fe3b06d6bf85acfd3d10bf083eba3737f0743579ad51c4f9","sha512":"077b41525b90af62da8e879379ed51e553a51a8d3c9846c9904e03c5f1889f43f963079bf00ea059f73b6adbf82eb48ccd0fd9288b5c3856e4870cc6a6b08fe3","ssdeep":"3072:2E2pspJm5Z9NFEDP6Q6OP37Du+AYZjAtZ8n/H:v2pspJm5Z93EDP6Q6k7DuQn/H","tlshash":"ce241a917220353422dfa037c4b70747b79d9085d932411cb2b4aeee5aeef9d22b9b74","first_seen":"2026-08-16T07:47:50.094407Z","last_seen":"2026-08-16T19:35:36.999911Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_betgames_2f61a7e2f4.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.467Z","timestamp":1786908875467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_betgames_2f61a7e2f4.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-81e\"\r\nexpires: Fri, 11 Jun 2027 03:20:53 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 5760822\r\ncf-ray: a2c2e097af60b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2078,"size_decoded":1784,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9818ecd5f40eb155e36b6e49c756a966","sha1":"47379bf56b3450b64b7f79fa537edb204ed6249e","sha256":"a0091d29aeae57f3eb668d8da45dba129f482ca3eaffebae9376ab2db523589a","sha512":"ba3ae1d47514fa1555908628970d05b54a541b09b1921c75854475c4865ab1dbb30556bc0b80d115ef037fe3ea707267e14aaf9be2a0ad10e966706320d29943","ssdeep":"","tlshash":"d141ee68835c66b0c566d78ccea433a72d77308bd2c22c74068269b7edd6ce84cc476a","first_seen":"2025-06-19T22:33:41.448778Z","last_seen":"2026-08-16T19:35:37.081831Z","times_seen":608,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BzggenXN.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.490Z","timestamp":1786908875490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BzggenXN.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:13 GMT\r\netag: W/\"140-19ffb3e9f08\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf76b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477,"size_decoded":1471,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (383)","md5":"2bfeeb9c7c2ce3474a6e73623d522ad3","sha1":"a918dce9b7d02a863f8d3404dce6837c85ac2080","sha256":"ecd8d7ce92f0f9391d831786b3a2d235cd6e11277ecb24969f03232e02a546b6","sha512":"3217a3e101adf0dcca557266c25595c76bf4fd29f89518b9fbaac58d04b42da4c024d3026fb4c076a5977205b97c739f206d752d550f8b157724ce7eb2e548c9","ssdeep":"","tlshash":"cbf09eea70f1b0fa57f75c60d0305243826c7480e3454374e20d59811a6e099aa6df44","first_seen":"2026-08-16T07:47:50.168803Z","last_seen":"2026-08-16T19:35:37.024021Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/scroll-to-top.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.517Z","timestamp":1786908875517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/scroll-to-top.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1666095\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Wed, 28 Jul 2027 12:46:20 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-ca\"\r\ncf-ray: a2c2e097ef91b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":1300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a963f5fa220de63c7a1dd7ab9534782","sha1":"f2e444a15be6eb4fed49e0b0e9f4c91ca99fc171","sha256":"df414352b91417d0c0aec521dd37f72a1f0495870065e514f4d1c4e0618a5263","sha512":"40bdbb1b6049c4e120cf3ba19f0a299f60d52bfd0877a0d617e128eb5b9396b1cc1d3fe872929b298362d381a30edb0a07d3c201bc9ba156235b5b9cf59deec7","ssdeep":"","tlshash":"1dd0ebe2a0c48a0089094036f3d88154d01b20b642c10496f2d37cb7805c2d5b81ad9e","first_seen":"2025-06-19T22:33:41.473005Z","last_seen":"2026-08-16T19:35:37.05975Z","times_seen":608,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/18.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.514Z","timestamp":1786908875514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/18.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1367774\r\nlast-modified: Fri, 31 Jul 2026 07:24:07 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Sat, 31 Jul 2027 23:38:20 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a6c4d97-113\"\r\ncf-ray: a2c2e097ef8eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":572,"size_decoded":1387,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67e2736e2c8cf08cd831af9baf10493d","sha1":"a44a86539a8929fe9b93cadbd4a88d9077b5482b","sha256":"b3b42b93a03edabe0fae4b8e61203aa092ae158f6e0d26300f00a95d6f52943a","sha512":"19eb5962202b156d80dcaa36808f9c9b8e33d886365a1889825f4e81474e33aac93a2e6f82a844c722db5f484c5bfbe16059abc70c645fa1e5422e8e758c401a","ssdeep":"","tlshash":"33f09e5c10fe0c1892254646f3cb32e92d3d785305ad0b9df54c68031fa2d2ea72f399","first_seen":"2025-06-19T22:33:41.456259Z","last_seen":"2026-08-16T19:35:36.958927Z","times_seen":337,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DztEB1jO.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.783Z","timestamp":1786908875783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DztEB1jO.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-j4z1qCMW2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 281344\r\nlast-modified: Thu, 13 Aug 2026 13:25:00 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Fri, 13 Aug 2027 13:25:30 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7dc5ac-340\"\r\ncf-ray: a2c2e099981db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2442,"size_decoded":2085,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2348)","md5":"e231f17da091621529dcbb430bcee234","sha1":"89d22616ae083716bd85fb37eb892def3e40f043","sha256":"6e2324a453be62fc32a518ffb7624331f05b2a81ffa285c227cea1d6e29d1f63","sha512":"1f874c58c0da687576a9c0427f87af3df2c1732f55cab99200a73f21bcf0b3704786e96e7cda118978400863cbc1889b0d19cebe6b14002e0e43932e7d13f1ab","ssdeep":"","tlshash":"8951f18a3165f87304ccdd57f0a362d661562098901e009c76adbcea23f8dd9672eb36","first_seen":"2026-08-16T07:47:50.149818Z","last_seen":"2026-08-16T19:35:37.030542Z","times_seen":4,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/smartphone.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.473Z","timestamp":1786908875473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/smartphone.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1067\r\nlast-modified: Thu, 13 Aug 2026 13:24:59 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Mon, 16 Aug 2027 19:16:47 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7dc5ab-102\"\r\ncf-ray: a2c2e097af67b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":1385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab5ec1653f6a6acbfa6fed2410890667","sha1":"6a9f788cc3148981127c7693922b53024005f7c9","sha256":"6566977db1d80e915999f7d6651f86c42d76508af15eed42473d389d9f26a7ff","sha512":"4eb1019593d889c2c16126f54099c7950350678f5111a7ffd396313f45d492667792369e1d1cd5e3975d596e0bbcceb857c749e9a9373fb71421d3ae8a5df3ef","ssdeep":"","tlshash":"a6f027b38a7591c68c905bd4ee4c70d823eef08479b540d583475e26bd5c0e71578d50","first_seen":"2025-06-19T22:33:41.442805Z","last_seen":"2026-08-16T19:35:37.022645Z","times_seen":434,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/sign-in-google.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.474Z","timestamp":1786908875474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/sign-in-google.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1609102\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 29 Jul 2027 04:36:12 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-a51\"\r\ncf-ray: a2c2e097af68b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6655,"size_decoded":4020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ad5448b3ad877baeef84b267547311e","sha1":"81514008dd42c4f820ce17c4f0d147755eb1eb4b","sha256":"8fb5501a7bd661af37c765fffe0ff280bec5af704fcd6cd381d91b1b699dd026","sha512":"0ff3dbf94c55078905b83964c07e1206568466afee0e29155d40448a3ac50ebdbe3e5f47c0acb8c09975dd20edfe525de161645694eb6b26847f7b39e1faacd6","ssdeep":"192:cA/JDriXs6SuuuslPhzHmwkgYXzlzJK3V:cGpysjr3lPhLmwhsG3V","tlshash":"46d112891070239de8c9a19d8bb6fdd0035e60dab672c5c5cfff9768540ea84fa3e424","first_seen":"2025-06-19T22:33:41.510614Z","last_seen":"2026-08-16T19:35:36.946569Z","times_seen":434,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/telegram.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.506Z","timestamp":1786908875506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/telegram.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1622882\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 29 Jul 2027 00:46:33 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-1ad\"\r\ncf-ray: a2c2e097df83b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":855,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49aafe51fa7aacf7edcd760e7913afa6","sha1":"1c8b752a5640b18804a7b4fd030e9db00852465c","sha256":"8e099656848b06021ce86fcde7a2d3c7c9cc83c2705709855b25bdaeebd7ffcc","sha512":"1ccf2fa170cc3935788cbb2745665b89f030c69c18ed4bab5e7317cb11d3cf67be66c1ef16acbbf77fc9ab246b916b3b484015c75ddd5c082679bf125c4c9662","ssdeep":"","tlshash":"881112c2da5c68f3d999cdaadf5480a5261d70b75694c3b8d4f0cf0a79601db7f09680","first_seen":"2023-05-28T08:00:53Z","last_seen":"2026-08-16T19:35:36.982836Z","times_seen":784,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/tours.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.460Z","timestamp":1786908875460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/tours.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 5234581\r\nlast-modified: Tue, 16 Jun 2026 06:47:12 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 17 Jun 2027 05:31:34 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a30f170-2c1\"\r\ncf-ray: a2c2e0979f59b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1520,"size_decoded":1855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb0e5ea9bb8160a4082f8702c2d06067","sha1":"82000b09df8461566b165f9953a2a2f8e59b052a","sha256":"81f6635887ed918dc49c14d040b90ef815fe8c4f0890d6e0d0c110fd8c5869ea","sha512":"7059836000b5dc898efd54c55eefa043f2f8518f753784bcdab9d94a4987710f11a5eb837d34b0a59c957f34a6b87f9585bb252ca6b02eb8f90ec51ea56fc1d6","ssdeep":"","tlshash":"d031ecf956bca29c114bea92df29859c530de074b77a8ae1964c4ab80883540f757930","first_seen":"2025-02-27T10:02:14.949086Z","last_seen":"2026-08-16T19:35:37.034446Z","times_seen":609,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_luckynumbers_41f6cfd1c1.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.465Z","timestamp":1786908875465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_luckynumbers_41f6cfd1c1.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-e0e\"\r\nexpires: Thu, 29 Jul 2027 11:47:09 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1583246\r\ncf-ray: a2c2e0979f5eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3598,"size_decoded":1998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e790e7a81970f561e38738e709a64d4c","sha1":"7e6f163a15f16bfb8e533ededebff193c30c6d86","sha256":"8c720765e89c4e4d225eb9f19a75e9e9dec3768077db957160866f1684a78a91","sha512":"bffbe4ec83b5a7acd2d0ff5e6c64ae4ea24103db0d1213f29c9382af6af76290b40a48578549c5beffcf90c320a629f0a93df33656d6e29d838822ad8cce9ed5","ssdeep":"","tlshash":"4b71f364424808f7f421ceec4ad83fcf03e93d4963d15aa6a11675fed37b9a0171b06a","first_seen":"2025-02-27T10:02:14.943619Z","last_seen":"2026-08-16T19:35:36.945716Z","times_seen":609,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BwOmbZNN.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.500Z","timestamp":1786908875500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BwOmbZNN.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:12 GMT\r\netag: W/\"2ce5-19ffb3e9b20\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097df7eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74668,"size_decoded":15896,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (5123)","md5":"038812133d5ae9fa559ec8607fc84f0f","sha1":"90e7fc50319c21191d23a765e345b7c703eb133d","sha256":"4b31d77092bb4c45715aae276aa0b02e4afbec43cb1042c57ab559ac1616b266","sha512":"ad6bbace9a0e623f5a84868fca85de1d51338eeccc7b60630e32df0067c5c4d0ccea144d0de406f860bfc77b80d870aa68f446125c01d0e45100978b5987841f","ssdeep":"768:HV7uJpLxVw1GasMGCIsLQn77qgPGBm24iSHaaEjeXUmyykn56:17uJBw9xITqGHaaEjgSykn56","tlshash":"c97375d0d211377a3e67a69ad5e74626ffd4288c9811a468b0d05cfd8ed9fe8600e373","first_seen":"2026-08-16T07:47:50.181217Z","last_seen":"2026-08-16T19:35:37.004681Z","times_seen":4,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/common/partners/toyota-cheetahs.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.509Z","timestamp":1786908875509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/common/partners/toyota-cheetahs.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 15 Sep 2025 11:47:11 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"68c7fcbf-3f9cc\"\r\nexpires: Sat, 31 Jul 2027 11:42:50 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1410705\r\ncf-ray: a2c2e097ef89b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260556,"size_decoded":85574,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b862b1ace7ffd3abb4888dcc461883ad","sha1":"784a2c37edf8d5087352bebac5023ef0bae14de1","sha256":"399a137aabbe408136f1a1b040d2089ef1c410516a32234922ba7a218a49a11b","sha512":"a6693b5d22fc97a2f3ac3753c830ba93cfb4230c2ccd1fea04f485616321e7daea81eceb922f608b6e95ac4b3b259d282a712bcd9066cb5fc7c488b4a08d47bc","ssdeep":"1536:kwNDbQ6dRHxrxYk6H+Nd0s0CvXUa5WrwhqppnL+mqzLFoA/aar+v1Tlz5FIJ5W2L:nddODLCtzTzWxipt","tlshash":"a444a6d427a6a3f4e842b3fccb2e54e57d6728fd7a01c5a8c3a16d59a84107d8d88cd3","first_seen":"2025-09-16T09:34:14.24048Z","last_seen":"2026-08-16T19:35:36.992812Z","times_seen":315,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/cart.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.472Z","timestamp":1786908875472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/cart.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 5901692\r\nlast-modified: Tue, 09 Jun 2026 05:35:33 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Wed, 09 Jun 2027 12:13:02 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a27a625-169\"\r\ncf-ray: a2c2e097af66b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":759,"size_decoded":1487,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96d0c21ce57b69542bc0989802661490","sha1":"7860f2f08614e866a2b046a2ae5154ce78ab5187","sha256":"d7867abb811ee3bce5fa702b397c1d738f0a0765e1e517f78df8614e24d32c52","sha512":"43772aeabafc76ab27b4686efc70766421c6e8d60a9fabb9aa29c0fda473756af3faf4aa7ebd0cf1921262ea92105f45fb3ffc2d54255f62052900d52049b2ae","ssdeep":"","tlshash":"e8019c7903f8402c1c179611a7ea89d89b4ee067964607c1717e98614fa3908d08f6e1","first_seen":"2024-12-28T16:59:37.024723Z","last_seen":"2026-08-16T19:35:36.980821Z","times_seen":609,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PGLZXW7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:36.075Z","timestamp":1786908876075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtm.js?id=GTM-PGLZXW7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\nexpires: Sun, 16 Aug 2026 19:34:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 16 Aug 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134063\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":405145,"size_decoded":134693,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19941)","md5":"17078a221ac057dcb8d6cbad9e8f2506","sha1":"2c37442cd93c1a76926db58d1ad9bd5f416c32a6","sha256":"e521af47b5e70b7e18be30d1e16d834ff1701f009fedad10da15fc9a58d20430","sha512":"829d60e98bbf3250a120fda229adb4f76a73e48ef66ec8c3a59a9b732abe0e65fd3417e4e3fd7ad619ca89452b3d3169618b5e3d2185efecc883eb56c9164cdb","ssdeep":"6144:2bNBD/1ESc0lXD82xJ0hcgLsegErl3POCY+Uy/N:2bP5lXFxR+Ue","tlshash":"cc8408cdb3da74669392a474503f018ba67e38e2f44cd895f089ccd42e74aaa5123f7d","first_seen":"2026-08-16T19:35:36.746419Z","last_seen":"2026-08-16T19:35:36.746419Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":40,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracker.growthbuddy.app/track.js?e=pageview\u0026u=https%3A%2F%2Fyesplay.bet%2Fsign-in%3Fstag%3D134789_6a8210cb72ee96f9507f6a91%26utm_medium%3Dcpa%26utm_source%3Daffilka\u0026r=\u0026pcid=a7deda37-caae-4fc5-959c-1860a3be54eb\u0026i=DV-32994169366256167699\u0026v=1.0.0\u0026uid=e415536e-cc23-4426-bde8-994632283a3a\u0026_nc=1786908876164","fqdn":"tracker.growthbuddy.app","domain":"growthbuddy.app","tld":"app"},"ip":{"addr":"18.200.119.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:36.169Z","timestamp":1786908876169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.growthbuddy.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 10:27:34 GMT","end":"Sun, 04 Oct 2026 10:27:33 GMT"},"fingerprint":{"sha1":"66:16:79:EA:69:6A:12:6D:B6:87:20:FB:52:EB:5E:30:B4:E7:CA:A5","sha256":"0A:80:51:A9:89:FB:26:02:49:A0:6A:D3:B8:9E:9C:43:2B:03:79:81:0B:7F:9E:B2:96:7E:2C:95:6C:E9:66:D8"}}},"request":{"raw":"GET /track.js?e=pageview\u0026u=https%3A%2F%2Fyesplay.bet%2Fsign-in%3Fstag%3D134789_6a8210cb72ee96f9507f6a91%26utm_medium%3Dcpa%26utm_source%3Daffilka\u0026r=\u0026pcid=a7deda37-caae-4fc5-959c-1860a3be54eb\u0026i=DV-32994169366256167699\u0026v=1.0.0\u0026uid=e415536e-cc23-4426-bde8-994632283a3a\u0026_nc=1786908876164 HTTP/1.1\r\nHost: tracker.growthbuddy.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nset-cookie: INGRESSCOOKIE=1786908877.187.104.58732|4755d7349ad2180cc27216e76023fb56; Path=/; Secure; HttpOnly\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"INGRESSCOOKIE","value":"1786908877.187.104.58732|4755d7349ad2180cc27216e76023fb56","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"INGRESSCOOKIE=1786908877.187.104.58732|4755d7349ad2180cc27216e76023fb56; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":344,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":7,"connect":32,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"goyesplay.com/ybabqohfq?cid=w76e998bhffcjrjkj46u1gqa","fqdn":"goyesplay.com","domain":"goyesplay.com","tld":"com"},"ip":{"addr":"104.21.66.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T19:34:34.898Z","timestamp":1786908874898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"goyesplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 18:35:56 GMT","end":"Wed, 23 Sep 2026 19:35:36 GMT"},"fingerprint":{"sha1":"5C:25:EC:24:0D:A5:46:4D:12:A9:4F:07:52:06:47:CD:98:BA:CD:68","sha256":"F4:6E:53:57:C1:D2:74:68:6D:36:79:C1:13:9E:86:DE:08:26:BC:DE:33:E1:F6:68:0F:4B:C8:FB:BF:9A:E7:C4"}}},"request":{"raw":"GET /ybabqohfq?cid=w76e998bhffcjrjkj46u1gqa HTTP/1.1\r\nHost: goyesplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nserver: cloudflare\r\nset-cookie: d6f0c71ef0c88e45e4b3=6a8210cb72ee96f9507f6a91; Expires=Tue, 15 Sep 2026 19:34:35 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d127729dae608225056cd26a88a07210\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2c2e0944ee056a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"d6f0c71ef0c88e45e4b3","value":"6a8210cb72ee96f9507f6a91","quoted":false,"expires":"2026-09-15T19:34:35Z","raw_expires":"Tue, 15 Sep 2026 19:34:35 GMT","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"d6f0c71ef0c88e45e4b3=6a8210cb72ee96f9507f6a91; Expires=Tue, 15 Sep 2026 19:34:35 GMT"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":144,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/fonts/open-sans-v26-latin-regular.woff2","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.336Z","timestamp":1786908875336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/fonts/open-sans-v26-latin-regular.woff2 HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 24 Jul 2026 06:32:46 GMT\r\npriority: u=2,i=?0\r\netag: \"6a63070e-415c\"\r\ncontent-encoding: br\r\nexpires: Tue, 27 Jul 2027 23:25:10 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 1714165\r\ncf-cache-status: HIT\r\ncf-ray: a2c2e096cf0eb28a-OSL\r\ncontent-length: 16732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16736,"size_decoded":17851,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16736, version 1.0","md5":"69c4c631d50be266b8dde5a66889ffa0","sha1":"82fd58537a22e18cf0661228133c3772164cb7db","sha256":"53bb85849942fe0fdb6998300d0c68f1727a6f34a3bdcd9f6f8f12476f64b1e9","sha512":"533458bab106ea37031c7dcafdd44726611726f3320ee34c327eafdf0b73f910c8026090fea8611704dffe9c6d0544b31bf1dd153a8a5acb294d72dc077e8793","ssdeep":"384:WyVtJGw+9VmmvLGVlaec7RMD+LCBCb2uQUwf8XVtJlK:WAtJGw+9VmmqV4VOD+LMCb2FEXXJlK","tlshash":"d672c0d51cf264fa91967537ae711cb39a7ab4030144e8aeedff46b5a0c21806b9503f","first_seen":"2023-05-07T17:30:13Z","last_seen":"2026-08-16T19:35:37.017151Z","times_seen":854,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_promo_7ed5a3e40f.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.468Z","timestamp":1786908875468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_promo_7ed5a3e40f.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-94f\"\r\nexpires: Wed, 07 Jul 2027 06:24:36 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 3503398\r\ncf-ray: a2c2e097af61b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2383,"size_decoded":1979,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9be2ded3518e1e3f744d61bf906e0127","sha1":"426f06d0e8ae2794c9f58a0e1a68a7efc4962530","sha256":"249980f81d8c333a6da40c574c2c4603b4061984f52db53eb69b1455d47b7a8b","sha512":"043876e651a19ccbc164778f9d4978e2b16d537707cf24684cd734450680157f311785e1c259d7064cee33e7089a3472fa7371eb42e9b72e6a1d352fa2fb1eca","ssdeep":"","tlshash":"3241def5c7ea0286f20a0218c6b6395e5e71326fe1c3cf5853917d25a6b5cbc29e5e0c","first_seen":"2025-06-19T22:33:41.495979Z","last_seen":"2026-08-16T19:35:36.908978Z","times_seen":606,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/icons/apple-touch-icon-180x180.png","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:36.315Z","timestamp":1786908876315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /icons/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_6458J4YNKF=GS2.1.s1786908875$o1$g0$t1786908875$j60$l0$h0$drGZRth-Nnhw1IVImudSPtbf4lweLKg9mJw; _ga=GA1.1.1391631391.1786908876; firstVisit=%7B%22firstUtmVisit%22%3A1786908875971%2C%22firstUtmSource%22%3A%22affilka%22%2C%22firstUtmMedium%22%3A%22cpa%22%2C%22firstUtmCampaign%22%3A%22134789%22%2C%22lastUtmVisit%22%3A1786908875971%7D; referrer=%7B%22customerId%22%3A%22AFFILKA%3A134789_6a8210cb72ee96f9507f6a91%22%2C%22source%22%3A%22AFFILKA%22%2C%22date%22%3A1786908875972%7D; DV_TRACK=e415536e-cc23-4426-bde8-994632283a3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 24 Jul 2026 05:39:10 GMT\r\netag: W/\"2103-19f92a27c30\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-polished: vary_header_present\r\ncf-bgj: h2pri,imgq:85\r\nage: 1690925\r\ncf-cache-status: HIT\r\ncf-ray: a2c2e09ce903b28a-OSL\r\ncontent-length: 8451\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8583,"size_decoded":9609,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"b9006a339abe0c367cc9714620785810","sha1":"d2e720858bfb8293412855facfe967e62faaa188","sha256":"ac959be34ec790af7d41bffbe35bfb828afab92814390204678b494a01139dbe","sha512":"9715e19a64a2b2d91f51b18a40a6587c1ae602890691f89cb0191849d8e760e5bd246f4e4f02971eab090968f0a382b14949b74a0171b868d279650d45278cd8","ssdeep":"192:tEaP7L/UeCMDqzIvO+gKDy7yiZU3FdvU2eF3zDaRFRZJDlZ4NDBn+/F:tEG7//G0vOqyeH3CDaRFRZJDl61+/F","tlshash":"1602bf9238556375e4041e48972088d6f7f1af1333034a5bbfd9242b2e28a4c87a55e6","first_seen":"2024-12-10T08:36:06.698044Z","last_seen":"2026-08-16T19:35:36.991057Z","times_seen":414,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay9278.zendesk.com/frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088","fqdn":"yesplay9278.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.54.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:46.723Z","timestamp":1786908886723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay9278.zendesk.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 21:28:32 GMT","end":"Sat, 31 Oct 2026 21:28:31 GMT"},"fingerprint":{"sha1":"24:D8:18:97:A7:1D:D1:6C:90:F0:18:18:5D:48:27:DF:23:DB:7E:43","sha256":"E3:1B:21:C1:B3:F7:9E:32:D4:57:1B:FB:8C:06:96:54:1D:D5:09:62:0B:2F:DB:BC:04:FC:0D:48:10:7F:CD:D7"}}},"request":{"raw":"OPTIONS /frontendevents/pv?client=1B752747-577B-429A-A0E0-83861AF69088 HTTP/1.1\r\nHost: yesplay9278.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://yesplay.bet/\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 16 Aug 2026 19:34:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncache-control: max-age=600\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nzendesk-service: frontend-event-ingestor\r\nx-zendesk-zorg: yes\r\nx-request-id: a2c2e0df68e35687-OSL\r\nvia: zorg\r\nx-envoy-decorator-operation: /frontendevents/pv\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=BMJ4PzKCuiYfK0ETBL.kIZkvdPBeTex1Qh0na99_E.c-1786908886.951195-1.0.1.1-m1roy3ERGS20Tcrbv.XIA39Api11O6TkjxFV8Zl_5y9nc526ZtteoGK.Xr.jsIWsAQnVkD54p68BftutozCIeldvYj8HtEPXTuIpopGGVEPFmomvj_juk9fzZWpo77fN; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com; Expires=Sun, 16 Aug 2026 20:04:47 GMT\n_cfuvid=suS_27kiszGG1yUeaP4S_VRaw7G8laRhNsXIUbsnXC0-1786908886.951195-1.0.1.1-vviqwAJAMtVUZF6DCvFEgEbHR9MxyMi3C0EFYrmcSR0; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNilmRLq3sTQjT4KPyaQMBhSitwEKfgbg1e5ApcVBjSfIK3hTGwDTyq3yBPt%2BZkSsx7krtt6cw%2F4y9u4kKh7KbPkt6K1qHXLyF9V%2BkweKxSOBVwXEixAKjhN4kV%2FomPT5LymdgS3B3CP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a2c2e0df68e35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"BMJ4PzKCuiYfK0ETBL.kIZkvdPBeTex1Qh0na99_E.c-1786908886.951195-1.0.1.1-m1roy3ERGS20Tcrbv.XIA39Api11O6TkjxFV8Zl_5y9nc526ZtteoGK.Xr.jsIWsAQnVkD54p68BftutozCIeldvYj8HtEPXTuIpopGGVEPFmomvj_juk9fzZWpo77fN","quoted":false,"path":"/","domain":"yesplay9278.zendesk.com","expires":"2026-08-16T20:04:47Z","raw_expires":"Sun, 16 Aug 2026 20:04:47 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=BMJ4PzKCuiYfK0ETBL.kIZkvdPBeTex1Qh0na99_E.c-1786908886.951195-1.0.1.1-m1roy3ERGS20Tcrbv.XIA39Api11O6TkjxFV8Zl_5y9nc526ZtteoGK.Xr.jsIWsAQnVkD54p68BftutozCIeldvYj8HtEPXTuIpopGGVEPFmomvj_juk9fzZWpo77fN; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com; Expires=Sun, 16 Aug 2026 20:04:47 GMT"},{"name":"_cfuvid","value":"suS_27kiszGG1yUeaP4S_VRaw7G8laRhNsXIUbsnXC0-1786908886.951195-1.0.1.1-vviqwAJAMtVUZF6DCvFEgEbHR9MxyMi3C0EFYrmcSR0","quoted":false,"path":"/","domain":"yesplay9278.zendesk.com","raw_expires":"","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=suS_27kiszGG1yUeaP4S_VRaw7G8laRhNsXIUbsnXC0-1786908886.951195-1.0.1.1-vviqwAJAMtVUZF6DCvFEgEbHR9MxyMi3C0EFYrmcSR0; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":184,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_sports_1907ef5349.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.463Z","timestamp":1786908875463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_sports_1907ef5349.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-79f\"\r\nexpires: Sat, 31 Jul 2027 20:46:11 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1378103\r\ncf-ray: a2c2e0979f5bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1951,"size_decoded":2011,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbfbf7655c597e514c87211fa5bd0462","sha1":"211036a30e07a9c9d8cddf8ac27a64e93b2afc9d","sha256":"3ba0f04279a61b137cbe4605bd7e52d96905868f61f9664aa2594ea1957d4224","sha512":"0d131e47c58ea96dde9873937777b74f7af93228080cd8612b53ec4e20810c6699781795b88f2bfb5f3812a2dad8384f8e9693beaddd6f786424135e1f9a84fd","ssdeep":"","tlshash":"f94145910bdc5668d4174a788aa03e5b73fa3c6f82c70d84d39f2da2b461c6095398bc","first_seen":"2025-02-27T10:02:14.947369Z","last_seen":"2026-08-16T19:35:37.014484Z","times_seen":609,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.rs/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-6458J4YNKF\u0026cid=1391631391.1786908876\u0026gtm=45g92e68c1v869774691z8839364323za20gzb839364323zd839364323\u0026rcb=7\u0026aip=1\u0026dma=0\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~120125305~120385422\u0026z=866177332","fqdn":"www.google.rs","domain":"google.rs","tld":"rs"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.914Z","timestamp":1786908875914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.rs","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:45:39 GMT","end":"Wed, 28 Oct 2026 20:45:38 GMT"},"fingerprint":{"sha1":"E4:EE:5F:2A:38:58:3E:10:13:8F:B8:2A:2D:01:68:9A:0B:5A:88:36","sha256":"22:AF:78:6A:F5:C3:D8:32:A3:92:50:B1:8C:74:80:AB:5D:79:FE:6F:E2:A9:D6:66:CE:E3:AF:5D:30:22:0F:9B"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-6458J4YNKF\u0026cid=1391631391.1786908876\u0026gtm=45g92e68c1v869774691z8839364323za20gzb839364323zd839364323\u0026rcb=7\u0026aip=1\u0026dma=0\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~120125305~120385422\u0026z=866177332 HTTP/1.1\r\nHost: www.google.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-16T21:08:27.553266Z","times_seen":1033526,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":38,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Ghg8y4aw.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.496Z","timestamp":1786908875496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-Ghg8y4aw.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 1427794\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 31 Jul 2026 06:20:31 GMT\r\netag: W/\"11d-19fb6d4db98\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf7bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":1434,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"0c61c694daf548ccb98ae4482aa554fd","sha1":"9c4bda175c2a96711ad5f8ccb53915cd92159a47","sha256":"b1934b1702f3f53f47d2cc62751388fd5bc8862df2cc929fbfbfc0f2c006730b","sha512":"89160e39d86778796f1bb7b61696321836f6e9cf491db1cd40ff71bc621605d8ba170152231e83d5bb1f7e570025b5cf1c3cb87208c08b50bdae41a818cb64ce","ssdeep":"","tlshash":"60f07db675d3fdf8f03564dce41d86c6264af0d3c76db602541394906c5088c25b22aa","first_seen":"2026-08-02T10:38:04.048404Z","last_seen":"2026-08-16T19:35:36.91819Z","times_seen":10,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/social/instagram.png","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.508Z","timestamp":1786908875508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/social/instagram.png HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\netag: \"6a684f39-1196\"\r\ncontent-encoding: br\r\nexpires: Fri, 30 Jul 2027 13:38:03 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-polished: vary_header_present\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\nage: 1490191\r\ncf-cache-status: HIT\r\ncf-ray: a2c2e097ef88b28a-OSL\r\ncontent-length: 4502\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4646,"size_decoded":5673,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit colormap, non-interlaced","md5":"0f4b7efeeec09ed5881c24964122cd63","sha1":"357a01c8578a49690c27f1d0906e7f59658521a2","sha256":"38066bb790dd9bd2d94fbb5ca3e26fb1de51b9172f00bf53895ee7778d330445","sha512":"dc39de1d76246e439bcbb3a5bf9b4208744744e6e667728042140684edcd266b64648dde769ef24f46cd6a29aab8b0f6930543297dcbb9438e1c5d4fa16df64f","ssdeep":"96:1P0oPPebVlenFFXgY76BX+FBj7IrjwZQg267HQSKHXEFeRnEezxu0qWY72aXEY:1PveSFFwZBXunqjqQg2ap60AZ9z8P72I","tlshash":"e8a17dce71b8632bf028bd5ce80167050c2395df2df197d9ab905edcee64de32625261","first_seen":"2025-02-27T10:02:14.93662Z","last_seen":"2026-08-16T19:35:37.046304Z","times_seen":432,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CrQ7hky6.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.501Z","timestamp":1786908875501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-CrQ7hky6.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:36 GMT\r\netag: W/\"1d9b-19ffb3e0e80\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097df7fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34316,"size_decoded":10108,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28893)","md5":"0d31128d7fe92c209db2a9991f1b1846","sha1":"9b0eac7d5c15f84aff9f8710aeccd67f5f770426","sha256":"49c9bef56bba79e1649b983dc40dae757515e9540251e972cebfd694561be13e","sha512":"c6c5243dc2a5e7d43c9a9319a7f7dfb485e9d1ace7edf6c1a4fe42d3449bb212224b567792c32a162f2964a3cdb71326ae79c0afa80930fd08c1437388035fa2","ssdeep":"384:kK3nsDeSSDCOngeV9zP0+p1uITztPoLvc7DM9LkQhOdB5PyE2PvfeUJPm94NeSk/:kK0eS6nVOcU7OdBev+6D4Zq1xoCdv6","tlshash":"60f2d78633c2b67583dd60b7e8594342e2641a5c148f602df43aedde3d6850ae1bef39","first_seen":"2026-08-16T07:47:50.142499Z","last_seen":"2026-08-16T19:35:36.986432Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D4H-4ih8.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.347Z","timestamp":1786908875347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D4H-4ih8.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 892335\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 06 Aug 2026 11:26:01 GMT\r\netag: W/\"258-19fd6d2b528\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096df17b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":1793,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1253)","md5":"6e9e91f1928634bac8a6ff202660729d","sha1":"cd4e95d4c79417b4dd35d7fa501a16a1a5b0d2f4","sha256":"215af0240d0b4b886752a71f14caee1b8adcea8d6b2d23e31ea2ccf661a5d90a","sha512":"a8fe97af459769223f989ea430e5967cebfd6f2be60a9c47ecc47cfea6a6361276be73b77399675ec8117fa2c36912f65a40f96401de4225a1fd2f73f4884b75","ssdeep":"","tlshash":"e321ce8226f4bab711b27689c82f4145e114e5b550f8e1d4e344dab1e0d409b14daf36","first_seen":"2026-08-08T07:36:52.308544Z","last_seen":"2026-08-16T19:35:37.031848Z","times_seen":5,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/sign-in-apple.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.475Z","timestamp":1786908875475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/sign-in-apple.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1549626\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 29 Jul 2027 21:07:28 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-211\"\r\ncf-ray: a2c2e097af69b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":1713,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb5e5352d3b286d8a54e1d050967fa87","sha1":"ad6a1fcda4c530f8a6e0304254b66f0d66b9a661","sha256":"0710c4b926420892e093c700eed407d96043b3a48cd06e965936df2fa4589b31","sha512":"b83456a226c6c279e5cea62dbd5f2f1efc3b3d4deb4363d7bdfbaf9c7f63837de9c1cf7765e667449650b81e6c82ae940100b3ea4e75924a2bba22e0db76795e","ssdeep":"","tlshash":"d711259a028199367c05520b18e10558167df4b6b5b0969c75ae080fa94d0e405283ae","first_seen":"2025-06-19T22:33:41.478711Z","last_seen":"2026-08-16T19:35:36.90987Z","times_seen":434,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-main-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:46.532Z","timestamp":1786908886532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-main-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: OqZbhI7DUahysUGuSL3AxgLvJK0jJmZ3JUxJWj0YqM1NQmza3l3l/0ngd1D/Zn7vqs0Bo6TQzx8=\r\nx-amz-request-id: 7ZAKWYN15EXD7S8C\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: vks_hKLmpC3Z3GqSrd8GGHJvyKJDK9.B\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 296893\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRpJlF6HV%2BjhloZ7iuVHp5tOQr9JZYAlUT6xgtOQObZKmE4bqzCcZdDoVJ23z8nOtKgCaAm4ot9moXe%2B%2F4nGCeRy%2BfnIPZDQUwep8sj6qj1FP7SiVt87uXFDGbDVt33HlLBBbS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"858c4430a33d22566db4740acb2cbe52\"\r\ncontent-encoding: br\r\ncf-ray: a2c2e0dccc3d0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":606269,"size_decoded":185766,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65306)","md5":"858c4430a33d22566db4740acb2cbe52","sha1":"23598dc09a828a03fdca01d44118686369b1269d","sha256":"dd73931be2042d04ca061d39f8549f5e299ce51b8b9429721a5255dc422df30e","sha512":"7fc37591e5ac3cbc07e63a3a01223cb6a5e587e06bc8452dac167e8e142a577571f29165044dd280e6382846027da6fa0e2a579ef11b5faebeccd81ed247985e","ssdeep":"12288:M0rLSdnjbqteAPD0GGX39+ADhJAftBlCMZJGqWs:M0rLSdnjbqteAPD0l++JA1OwGqWs","tlshash":"2ad47cd970d2b0661bf345e7506f2006b33939197c0d8490f698ec9a6bb848db1b7fad","first_seen":"2026-08-13T10:51:38.74408Z","last_seen":"2026-08-16T20:58:47.317004Z","times_seen":60,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/YP_100_BONUS_CASINO_1080_X1080_1fefccda76.png","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.368Z","timestamp":1786908875368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/YP_100_BONUS_CASINO_1080_X1080_1fefccda76.png HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 May 2026 09:55:22 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: \"69fc618a-46a5d\"\r\nexpires: Mon, 16 Aug 2027 19:21:46 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-polished: vary_header_present\r\ncf-bgj: imgq:85,h2pri\r\ncf-ray: a2c2e0970f45b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":289373,"size_decoded":290495,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"9c905a4195f6cb7c1315c2c005a11cb2","sha1":"0606667b6ce7a078ec48684bbec0a3b42a3f6c14","sha256":"56b7f85dfd01187835f252645243c63fd328358016bb284a57c74bcc9e66659e","sha512":"afbd9f8cd19fb56129ed2d3866af8ce1927e360dc8710e14ce06bb84aa012d42110c509ff3d9864e3307e694be59b4e3c4b65bd73319eeb855ad2a5d4d0601ad","ssdeep":"6144:GQtXARef83DwiiaatE4YOOcoqJAP10mt8XG/i9lC9yUlWN:5XARykDwBkTc6103WqXCcUlO","tlshash":"0b5423ec54395fa41a5a1113df638ea398e05f8a5cc392b0f521d0a6b1de2dd3e86fd0","first_seen":"2026-05-07T22:09:10.115348Z","last_seen":"2026-08-16T19:35:37.080685Z","times_seen":146,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Dw-w0y4c.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.494Z","timestamp":1786908875494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-Dw-w0y4c.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:11:01 GMT\r\netag: W/\"e87-19ffb3f5a88\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf79b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12830,"size_decoded":5476,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12732)","md5":"92819d216527e4112dc06a25fe975776","sha1":"b1833d992f18bfe2935926118e44fb3d39cbc1e9","sha256":"dfd567532aa0c0701fcdab48d406a018cdca81e94ee7215e1436d0c45f145554","sha512":"c54585846a769747a7f040424d30ba13f8f2864cd182290360b5467e365b3d481d5ca356e3778c04fff83de91a4a19af7d7be399a18313ff9266d43dc9bc13cd","ssdeep":"192:Ar7MxohVPmlXb+sCrRXEOW4IpzN2G4CHOoZUdysDxJP9kCQRXx31T4rcbMLxFDmq:wss+mXEljpzN2GvQrzlkCwXhxa7/STS","tlshash":"dd42e546735236b482fd9166b8b7120012350259649c74dcb92c149abf8bc8db5fff7e","first_seen":"2026-08-16T07:47:50.170242Z","last_seen":"2026-08-16T19:35:36.919451Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BpO5OIrs2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.555Z","timestamp":1786908875555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BpO5OIrs2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:08 GMT\r\netag: W/\"172-19ffb3e8b80\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0982fa9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":608,"size_decoded":1531,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (512)","md5":"fc7563a280c5abf16d587774bc831289","sha1":"28ca2e5468fad1cfdf654fd00cdfcf4a4dc08077","sha256":"5b083b9658d1155751f3ee9ffaed2d4bc81e40ed88f7075272f6b10ea8077260","sha512":"226a22e397fd3af3201fc1a4aeba0fd4b8d4e5bfedbede0743bc51cf8228fea5086cfc45d43e6fd3f8ce1779f4d9728c5d2de9701b96981984393625cfdc065f","ssdeep":"","tlshash":"9cf002e364fdb0b002668cead0348323a6003a9743464034e0ed5abb2de5cc197ecda6","first_seen":"2026-08-16T07:47:50.178597Z","last_seen":"2026-08-16T19:35:37.011011Z","times_seen":4,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-sMBEZL8Y2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.566Z","timestamp":1786908875566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-sMBEZL8Y2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:37 GMT\r\netag: W/\"218-19ffb3e1268\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0983fb2b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":1700,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1022)","md5":"79047d3ea7869b60a034c81df38359ae","sha1":"f676b01a2fd68b1e2e65c67e694712bf329a11df","sha256":"5fe9dee4d53251fdc82d22cc306605a31ab5d14b76e79e8a1a92f39a6c3ca3cf","sha512":"47def3134e09732cc6ebb963543d319ade7aa6cb00ebf309ed499ec768029741872509c8df01f833ab88c7c3d71ddab06d06b7d6815f67cc1314323a5dd2ca90","ssdeep":"","tlshash":"af2123152569f8ba527dcae2e410c712d2e42ad48508813cf23e9cd0f852c06737dff0","first_seen":"2026-08-16T07:47:50.155395Z","last_seen":"2026-08-16T19:35:37.028269Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-C1y0Kqzx.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.689Z","timestamp":1786908875689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-C1y0Kqzx.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-JErO1Z4p.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 1167979\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 03 Aug 2026 06:17:21 GMT\r\netag: W/\"f5-19fc6450968\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0990ff3b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376,"size_decoded":1386,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"db9e1ae2ba762638f446f81e39eca3f2","sha1":"126ff26143383b13f5be12ee60ea13fb41a9fc56","sha256":"a3bff259d044555f8faf9f94cbcfd6197da231a8f83fdb2c254893e2052fd149","sha512":"0c3c509681604ce208c5bde7848e1d11a4062329f4306bbd3c917639a65628f8ca5009edfdef94e3fb07f8245c93c51fd0195f7d2714b90342a2eee748ccaf9e","ssdeep":"","tlshash":"25e0f1a9719373319342042c420ec99a321ed40780290146f04884d03dd8c7043f5fa1","first_seen":"2026-08-04T07:34:42.417871Z","last_seen":"2026-08-16T19:35:36.996949Z","times_seen":6,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://yesplay.bet/websockets/api/1.0/?siteId=1003000\u0026operationId=1000000\u0026EIO=4\u0026transport=websocket","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.828Z","timestamp":1786908875828,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /websockets/api/1.0/?siteId=1003000\u0026operationId=1000000\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://yesplay.bet\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /7j6chIw0I/AwPT2ucjwrg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 16 Aug 2026 19:34:35 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QoFogCPnvliqnkQdq4T325Ia4W8=\r\nVary: Origin\r\nAccess-Control-Allow-Origin: yesplay.bet\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Allow-Methods: *\r\ncf-cache-status: DYNAMIC\r\nReferrer-Policy: no-referrer-when-downgrade\r\nCF-RAY: a2c2e09a0fa8712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":439,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":12,"connect":13,"send":0,"wait":73,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/analytics/ag/g/c?v=2\u0026tid=G-6458J4YNKF\u0026gtm=45g92e68c1v869774691z8839364323za20gzb839364323zd839364323\u0026_p=1786908875322\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma=0\u0026gdid=dYzg1YT\u0026_eu=AAAAACAC\u0026_uip=%3A%3A\u0026cid=1391631391.1786908876\u0026fp=1\u0026frm=0\u0026ibt=1\u0026ngs=1\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026ur=RS-SE\u0026_gsid=rGZRth-Nnhw1IVImudSPtbf4lweLKg9mJw\u0026_s=1\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~120125305~120385422\u0026sid=1786908875\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fyesplay.bet%2Fsign-in%3Fstag%3D134789_6a8210cb72ee96f9507f6a91%26utm_medium%3Dcpa%26utm_source%3Daffilka\u0026dt=Sign-In%2FSign-Up%20-%20Lucky%20Numbers\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026gap.gtb=1\u0026tfd=1031","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.909Z","timestamp":1786908875909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"POST /analytics/ag/g/c?v=2\u0026tid=G-6458J4YNKF\u0026gtm=45g92e68c1v869774691z8839364323za20gzb839364323zd839364323\u0026_p=1786908875322\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma=0\u0026gdid=dYzg1YT\u0026_eu=AAAAACAC\u0026_uip=%3A%3A\u0026cid=1391631391.1786908876\u0026fp=1\u0026frm=0\u0026ibt=1\u0026ngs=1\u0026pscdl=noapi\u0026rcb=7\u0026sr=1280x1024\u0026ul=en-us\u0026ur=RS-SE\u0026_gsid=rGZRth-Nnhw1IVImudSPtbf4lweLKg9mJw\u0026_s=1\u0026tag_exp=115938465~115938468~118897920~118897930~119367802~119367810~119527019~120125305~120385422\u0026sid=1786908875\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fyesplay.bet%2Fsign-in%3Fstag%3D134789_6a8210cb72ee96f9507f6a91%26utm_medium%3Dcpa%26utm_source%3Daffilka\u0026dt=Sign-In%2FSign-Up%20-%20Lucky%20Numbers\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026gap.gtb=1\u0026tfd=1031 HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_6458J4YNKF=GS2.1.s1786908875$o1$g0$t1786908875$j60$l0$h0$drGZRth-Nnhw1IVImudSPtbf4lweLKg9mJw; _ga=GA1.1.1391631391.1786908876\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nreferrer-policy: no-referrer-when-downgrade\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\ncf-ray: a2c2e09a6850b28a-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://yesplay.bet\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nserver: cloudflare\r\npragma: no-cache\r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:197:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:197:0\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"ascnsrsggc:197:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:197:0\"}],}\r\nvary: accept-encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":942,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CEQBuk-Z.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.504Z","timestamp":1786908875504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-CEQBuk-Z.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:28 GMT\r\netag: W/\"2bb-19ffb3def40\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097df82b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1707,"size_decoded":1915,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1609)","md5":"4c27c862c84ba63cab1a8754334fcf42","sha1":"4b62b18597ff05fc383d9d53a546e5dde1c34a56","sha256":"173796acc71dbc34525f5fc010a1b2d3d95826fb840b894a60481efec07f6fbd","sha512":"6fd2b89884963f7f8027d4bf2eb6500b203f432651bda25516774d28caf44be3640fdf6bbf044fb41379caf9220ba33d7392365c1015ec6e801d97a4a078bd0f","ssdeep":"","tlshash":"cf3110b3b2f9b1f406a9dc79c52166a183118529462d6739f2ec06c1239344daa9ef31","first_seen":"2026-08-16T07:47:50.118459Z","last_seen":"2026-08-16T19:35:36.927576Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BpIiM6E4.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.545Z","timestamp":1786908875545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BpIiM6E4.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 376765\r\nlast-modified: Wed, 12 Aug 2026 06:54:42 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 12 Aug 2027 10:55:10 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7c18b2-2b68\"\r\ncf-ray: a2c2e0981f9db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53424,"size_decoded":14492,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53272)","md5":"4ba6685ab03978cc468e4692260d5257","sha1":"f92fff2e590606624fefc6bbfe87bf9c0b3e2dca","sha256":"fdf4a81f4817c17c402f9b24619a27114a1575a0e2c6fa1167affddc492986b3","sha512":"67602d81edab1d0b4513e609b51506d005d9b35956f2f0be498f73aec58c0efca5e50f6f6ebfa51826471670647e076b11a261ec5ff14d1c97361af90a9ccb3a","ssdeep":"768:jedDYlp2C2BajcHMb3CWDzJdjP+8PHtfG4ZaOIPNeY+o4:8DV4cHMlv9MNS","tlshash":"7033c8497276b13006dda0ad94368543e31eb4c59404805fbabcfdde69fcc986abfa34","first_seen":"2026-08-16T07:47:50.067898Z","last_seen":"2026-08-16T19:35:36.944835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D1VMXT51.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.563Z","timestamp":1786908875563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D1VMXT51.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:48 GMT\r\netag: W/\"2bf-19ffb3e3d60\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0983fafb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1829,"size_decoded":1901,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1732)","md5":"23039be4691fa93102b8f0eaed9e1a82","sha1":"02128e618b8ee05e75766cfaa72ab0db386afbe6","sha256":"a677d47bea7ea06bccf9cf440838306d58af8f61a7a5b0895dd238b5d66f7abe","sha512":"f8f9ee013fac6a2ed20974c2720eb47bda94b0ebf6f219deceb4ea38b33a3570ae6e3dc9a02ca5998e51e637fb7684ba71721d74907369b5886036998a2b8068","ssdeep":"","tlshash":"6831649f3ca6ecaf7569d9a7f4124206b30d32019108803df72dacdf69b4c543a78a35","first_seen":"2026-08-16T07:47:50.144365Z","last_seen":"2026-08-16T19:35:37.022011Z","times_seen":4,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DKDDh_qz.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.653Z","timestamp":1786908875653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DKDDh_qz.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:58 GMT\r\netag: W/\"44b2-19ffb3f4ed0\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e098cfe6b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65989,"size_decoded":22984,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"62c0861e538d766f955c577d4db99b6f","sha1":"9e8e449a310130d0df65375c14b7b02726d2c7e3","sha256":"0dbb58a7a69e0d9689ec75d043d5b72e1624504d954fe0460207e2c78862493e","sha512":"c23227c40cd5c4c779f40a66cc449a1a504225c6e24cb516fc7fa99f03579085ce776632767410583afa8998d07d0b5919a05b471df1893ee0cee04d5b4b2246","ssdeep":"768:ljUmsPIOKBVWuBjsmfC9bdI4H+OLANYjXSIX6223BfEIiei/A7FgsbSg0TkFpguB:lgfKyQNf2Tm223tViSBgs50grKSV","tlshash":"ff535edee3021eb60c92d719f2ae66d7e2e03054465cc3e868efc49513a65d6607e8f3","first_seen":"2026-08-16T07:47:50.112549Z","last_seen":"2026-08-16T19:35:37.025875Z","times_seen":4,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DfYz95Oc2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.784Z","timestamp":1786908875784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DfYz95Oc2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-j4z1qCMW2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 281344\r\nlast-modified: Thu, 13 Aug 2026 13:25:00 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Fri, 13 Aug 2027 13:25:30 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7dc5ac-25a\"\r\ncf-ray: a2c2e099981eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":1804,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1201)","md5":"edf7be5b2d74d8618a8d9c2e16f952b6","sha1":"f2f6d46b7cf6b88994e590627739df8b178ac6ef","sha256":"5951d22cea0fc90bf15245bdc8bdc1627dbe4a6339d03798d1066ca22dcc0976","sha512":"63e62b349376b8b3a5888efa1b53f7bf837d037eaa67e089132945e8b9bc108b69f50fc21c3b912bcea5b476c2fadf64dabf99495e51c406894aed9fe0b4db60","ssdeep":"","tlshash":"ec21125b71a434f2869cd8f8c62f57524326b0910928233dba8d6ddf01e5c4ab72ef32","first_seen":"2026-08-16T07:47:50.111077Z","last_seen":"2026-08-16T19:35:36.928418Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BMtTkFHS.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.349Z","timestamp":1786908875349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BMtTkFHS.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:45 GMT\r\netag: W/\"a682-19ff1fafa68\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef1ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160830,"size_decoded":53619,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"f995c46753e0382533e2b86d7bb1593e","sha1":"e30ae5ca736707be18c020e0453dd9906dd0013b","sha256":"28df8274c9462e858db3dc03e098f3459c11591901f0ef7b874e3da144caea7e","sha512":"310655d0089bbd1628eac2ae9de1ce02f8933e3831ee11e68c64118827e5a62865f505300f068000876ff738a7a5adf538c442842aeb0111471893f337085216","ssdeep":"3072:eNLawk9xm0cnxfLxSqz0trcRP6JvUAKg3YbN8:51m0eL0trcRPgV","tlshash":"48f307a433d2f02247da55a6c4770543f23b6885644d843cf628eceb3896e4992bbff5","first_seen":"2026-08-16T07:47:50.100538Z","last_seen":"2026-08-16T19:35:36.925223Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D1zHvp01.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.564Z","timestamp":1786908875564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D1zHvp01.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:48 GMT\r\netag: W/\"2ac-19ffb3e3d60\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0983fb0b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1605,"size_decoded":1901,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1510)","md5":"8468f91d9528f0a19711f23ea675dfba","sha1":"53ea4ef930db544c8660d7ebd9d39ffa64106f2a","sha256":"a2ee4274a40bc88199b86ab16d92b0898ece5b24c1b76357a78ecc5c1c0117c5","sha512":"7fd3c65a34f3848a46459bcf8b57ae1da4f47dd72517cb3621f005159f061da9f82ad36e5e0c752ae778b8bd6ae0b051fb1c89ebede466a62a67df30bbde8df9","ssdeep":"","tlshash":"273133c5828672b2c7bcd0e9647b6b82232c56b4259440fcf0b51fc17da440f77eaaa5","first_seen":"2026-08-16T07:47:50.146193Z","last_seen":"2026-08-16T19:35:36.992041Z","times_seen":4,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DkwRRX3L.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.547Z","timestamp":1786908875547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DkwRRX3L.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 389386\r\nlast-modified: Wed, 12 Aug 2026 06:54:42 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 12 Aug 2027 07:24:49 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7c18b2-108\"\r\ncf-ray: a2c2e0981f9eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368,"size_decoded":1402,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text","md5":"4bdbf5903b591395f3135c7693946ff5","sha1":"d5dfb013e4e88e341730070ba4c076d7b11c7e25","sha256":"00c65ab0a567c3181b3dac098644b54da8cd7ef8266e9d53f2b8b623d8711001","sha512":"c576ee425d7c8b635f62f1f86c4341ea4949e384bb208533ab5df8316388d4876190958a076cfb3bcd6567e1be62946fbbd1eeb4a03f656a12a0f95be1fd776a","ssdeep":"","tlshash":"34e0c09fa09af07083a66dd6c0958207fd2c4bb6c2895358f11d1168336149af2fcf22","first_seen":"2026-08-16T07:47:50.171662Z","last_seen":"2026-08-16T19:35:36.947521Z","times_seen":4,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracker.ads.sportradar.com/dist/tracker.js","fqdn":"tracker.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.966Z","timestamp":1786908875966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tracker.ads.sportradar.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 23:21:20 GMT","end":"Tue, 08 Sep 2026 23:21:19 GMT"},"fingerprint":{"sha1":"9C:C7:08:07:E9:4E:80:B9:77:1E:FB:41:52:2B:0C:47:76:CE:AD:80","sha256":"14:69:9B:2C:8D:43:8D:61:B8:D3:F4:E2:16:98:52:FE:36:A1:48:21:7B:0C:85:44:F5:1B:7A:1C:6E:21:07:80"}}},"request":{"raw":"GET /dist/tracker.js HTTP/1.1\r\nHost: tracker.ads.sportradar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Feb 2026 07:42:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3v06qycN93gfZzupU0Hoyc9HCdrMI3Bd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"aabe4acdb23c936870089af58cfefc81\"\r\nx-amz-cf-pop: CPH50-P2\r\nx-amz-cf-id: jLTigumnN0SCFFIria1fMPQhayhp4T9OGcC8Rc8TMb6K6HilN2pcgw==\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6455\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncache-control: max-age=900, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":28081,"size_decoded":6983,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28016)","md5":"aabe4acdb23c936870089af58cfefc81","sha1":"2749ee030e70cc99cb5de9e100c1b1b6cfe987fb","sha256":"2522e3f24f318e5c2d998482e9dbb933566aa4eb8b55bccbfff48c91505d27ba","sha512":"984d2c6b07cd8ffcd6efe8ca33109737bbc19d975da89dc1c2545d98361b3464ce2a913d8e033edcc6c5c240e1169c34b9d8b38c8cc0f92397641406cbb1536d","ssdeep":"384:8eCEybEpnGD6PNt+ZCACbjfMUohXmfrPNIHF45oCrZJLF4P1ayhy8NVb8duUCFno:8eCNCACsoeHF45oC0jokUCGGu","tlshash":"6fc2739cb1c1b0754697b175422f250fb2b6745564dad0e0e132ece0aef8c8d68a7f2e","first_seen":"2025-05-20T20:25:30.181667Z","last_seen":"2026-08-16T20:05:50.325057Z","times_seen":7500,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tracker.ads.sportradar.com/dist//sp-3.8.0.js","fqdn":"tracker.ads.sportradar.com","domain":"sportradar.com","tld":"com"},"ip":{"addr":"95.101.11.161","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:36.181Z","timestamp":1786908876181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tracker.ads.sportradar.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Jun 2026 23:21:20 GMT","end":"Tue, 08 Sep 2026 23:21:19 GMT"},"fingerprint":{"sha1":"9C:C7:08:07:E9:4E:80:B9:77:1E:FB:41:52:2B:0C:47:76:CE:AD:80","sha256":"14:69:9B:2C:8D:43:8D:61:B8:D3:F4:E2:16:98:52:FE:36:A1:48:21:7B:0C:85:44:F5:1B:7A:1C:6E:21:07:80"}}},"request":{"raw":"GET /dist//sp-3.8.0.js HTTP/1.1\r\nHost: tracker.ads.sportradar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Feb 2026 07:42:43 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: V32ng7UtmVBdsU0vK0R8Y9f_TGAxNFMy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"902739d7e2c1e6b737f4f675c76baa27\"\r\nx-amz-cf-pop: CPH50-P2\r\nx-amz-cf-id: z4pkAoOg5h2zR81m85ofoVLKjbutYEzFSuRpf9rw37UJCvxk7k_8Qg==\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-length: 23984\r\ncache-control: max-age=900, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":74143,"size_decoded":24513,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"902739d7e2c1e6b737f4f675c76baa27","sha1":"4157ca6a678984a5bee7a009d437970945022bfd","sha256":"bdcfff76b1a267221f3557b2eeb6b4b28f87eceefae0e25f328ef63c0cb1778f","sha512":"56fbd99c91efb7e7075224d34649f126d79bd14f0d3241471dd649691c9ab5f9f4a91f33792e5054146e2e115ed519beb6d2b94bb31fe54a164649baa6edb29e","ssdeep":"1536:KBw/RhMOVdG6MpORhWXnj/cPs+fS6xmpe:KiOXnj/7+fEpe","tlshash":"867329c976d4b06626bb31f5046fa10fb33eab85584dd440a621f5d43cb0a8f7267e2e","first_seen":"2025-05-20T20:25:30.164056Z","last_seen":"2026-08-16T20:05:50.354896Z","times_seen":7483,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DyneDOU5.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.782Z","timestamp":1786908875782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DyneDOU5.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-j4z1qCMW2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 391155\r\nlast-modified: Wed, 12 Aug 2026 06:54:42 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 12 Aug 2027 06:55:20 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7c18b2-17e5\"\r\ncf-ray: a2c2e099981cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21971,"size_decoded":8211,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21877)","md5":"6b31c806629ecdbdd7d20c821570806d","sha1":"a33f1ee797b9854f137fcb0d9b81591b5279f06f","sha256":"4a9325c34cade9ee412323a56b20fcd07d888873ab75a87e308cbe4b8b0220fa","sha512":"0ee03f68019825e1ecc270eebad8a47b0e7e1ca0c5667c124be05aada582ed03b28169baa27cfc93e77f2bcb4ecef4d8e0a3fa79b0121bbce11311c24ae310a6","ssdeep":"384:j3PvbCp5K0vRHQSFdESTT1FGo8KMzr/yUi8mviOHx8UBs41:k4GjESJiOHx8UBl1","tlshash":"0ca2c56937eab13142ee306e545b10015637acec98894494f621b087ec3ef8b71abf77","first_seen":"2026-08-16T07:47:50.109493Z","last_seen":"2026-08-16T19:35:37.027079Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/styles-XAYNLM4D.css","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.339Z","timestamp":1786908875339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /styles-XAYNLM4D.css HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nage: 281375\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:45 GMT\r\netag: W/\"2cd5-19ffb3e31a8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096df11b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94979,"size_decoded":16326,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a913ed8024cfddcc9f7d79d9fcb6b921","sha1":"e3425e1369498543d7c67a5bfb655b50125bc4cd","sha256":"979fe1e7b06154b9d39b6623b4ad3f195f3f3473d4de260d354f3171cda636a1","sha512":"0f0ee56ad6f5476b8402274b15ccc470db9b2eba07e983057326782ea7d1f73ba2a8c487a37222d412576e1e9e0bd7da884a6e8bf1b4728b5d67d2b0d0640e78","ssdeep":"1536:Qq/F9c+TGi8rTEGF1gXK3bPJYoDH/5mpoSuTMM7pvQZpbZ5:z//dZpbH","tlshash":"a6939542f600043fb5178b7e5090da797f94acc1ea0267bbf0816858e6dd4b5b2de1ab","first_seen":"2026-08-16T07:47:50.184172Z","last_seen":"2026-08-16T19:35:36.97888Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/arrow-2.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.367Z","timestamp":1786908875367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/arrow-2.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1405286\r\nlast-modified: Fri, 31 Jul 2026 07:24:07 GMT\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Sat, 31 Jul 2027 13:13:09 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a6c4d97-a4\"\r\ncf-ray: a2c2e0970f44b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233,"size_decoded":1256,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"504669221f09e912ab8f55558a70c53a","sha1":"c706d58f184c980e861ac44bc2577cdc2ce84d10","sha256":"d91a1e96aef927277db44000f523580805a787065a6db3d2d72607ca5d239c73","sha512":"4808e3985af11e90844d1ae741d3957a2d8de1639a7b0f8499ecc6cb5bd0254d1bef1fea4a0d431d203193f2abaf453c96618ba40f4f1b07cdf6fe453e84572b","ssdeep":"","tlshash":"d8d0a736611549ca44448bd0d41d35b254a570fa22ad009595401ae0f4cfafb2c68da8","first_seen":"2024-12-28T16:59:37.029371Z","last_seen":"2026-08-16T19:35:37.023335Z","times_seen":610,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/common/providers/habanero.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.513Z","timestamp":1786908875513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/common/providers/habanero.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 12:27:07 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"68c2c01b-12a9\"\r\nexpires: Fri, 30 Jul 2027 15:15:39 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1484336\r\ncf-ray: a2c2e097ef8cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4777,"size_decoded":2868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8349e66295e12855ae59993019fe86d","sha1":"9583d5337de7f351b2c1120e5917a96dcfae04a4","sha256":"fb5c0ec64b76bdb8249d71bef552d2ee1c3c5ffe8f48f55518bf579701cfcb3b","sha512":"bb2dbdfd64fc85048401c05b23621e74e8c965c82d7d8b99b15ea835769adda93bf5fcb84fd3e61eac03d54c23aa019411e34bcc645ffced3c747c5fd7067ec9","ssdeep":"96:B1w0sX15x7UwBZHSStH0BYe4FwPqM55Ss6Uiu5A:kR5x7U0ZHvM4FwtA","tlshash":"f9a15149c7bc403288da876cca15a17a771a19d352d0d270f72d9bb43b23ce9580fbd8","first_seen":"2025-09-16T09:34:14.257723Z","last_seen":"2026-08-16T19:35:36.920687Z","times_seen":338,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stream-838.optimove.net/","fqdn":"stream-838.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"34.144.193.179","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.880Z","timestamp":1786908875880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: stream-838.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-optimove-auth-capable,x-optimove-platform,x-request-id\r\nReferer: https://yesplay.bet/\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type,x-optimove-auth-capable,x-optimove-platform,x-request-id\r\naccess-control-max-age: 86400\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'self' *.optimove.net\r\nserver: Optimove\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":512,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":49,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.growthbuddy.app/tag.js?id=DV-32994169366256167699","fqdn":"tag.growthbuddy.app","domain":"growthbuddy.app","tld":"app"},"ip":{"addr":"18.200.119.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.970Z","timestamp":1786908875970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.growthbuddy.app","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 10:27:34 GMT","end":"Sun, 04 Oct 2026 10:27:33 GMT"},"fingerprint":{"sha1":"66:16:79:EA:69:6A:12:6D:B6:87:20:FB:52:EB:5E:30:B4:E7:CA:A5","sha256":"0A:80:51:A9:89:FB:26:02:49:A0:6A:D3:B8:9E:9C:43:2B:03:79:81:0B:7F:9E:B2:96:7E:2C:95:6C:E9:66:D8"}}},"request":{"raw":"GET /tag.js?id=DV-32994169366256167699 HTTP/1.1\r\nHost: tag.growthbuddy.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nset-cookie: INGRESSCOOKIE=1786908877.125.104.548420|5f2e1b57d78510d04b0cf9036879032b; Path=/; Secure; HttpOnly\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nx-content-type-options: nosniff\r\netag: \"1861-+DwMjy4B7vQc8PtB+iYPSVv5N3w\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"INGRESSCOOKIE","value":"1786908877.125.104.548420|5f2e1b57d78510d04b0cf9036879032b","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"INGRESSCOOKIE=1786908877.125.104.548420|5f2e1b57d78510d04b0cf9036879032b; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6241,"size_decoded":2867,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6213)","md5":"7c5dcf30251141b544e6353e5bbf04a6","sha1":"f83c0c8f2e01eef41cf0fb41fa260f495bf9377c","sha256":"56a317053688f59ca2544ed7c8dd9ab6b9bebe4f75ed9518e8362762ae19270f","sha512":"e20ce742f58cfb1214c45c74fb72d42617f75ab40dabb618a5ec5c4367fe751cffb902865ae3c30c21719e67b7cfd39282c8c0dbd2efa36cf0f5a1124521d44f","ssdeep":"96:zDE5M3fZeoaaM6NqnU4GYP1jAb4VqoYbGPZK0meTaLFd1d7wdq3skqIXh47dDT67:zDE5CfpaoNqnWZonBK0m+8N5wg8tW4xC","tlshash":"e7d1739b76d4a0ba51a95563afbf338b142375aa2c04841c7115ece7dd6ce4b001be7c","first_seen":"2025-02-27T10:02:15.039681Z","last_seen":"2026-08-16T19:35:37.001696Z","times_seen":635,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":9,"connect":32,"send":0,"wait":33,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/download-android.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.479Z","timestamp":1786908875479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/download-android.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1649314\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Wed, 28 Jul 2027 17:26:01 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a684f39-1be0\"\r\ncf-ray: a2c2e097bf6cb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23187,"size_decoded":9807,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"559811e8527ea5ea334684e23c0ba29b","sha1":"931118d1dccf209364242b277aa8dc1d7c19fdfd","sha256":"af8009b5815bd64b9da620e34fa45fa2428256e343a36c0563090d92b00ed122","sha512":"18170b0eae3be4ae6b725ea6a5d2f3a9a84c052496c76991c5e377a1bd8255652d067b76b732c00fb59e56df4e738093e64e4c1258bebfac1ac1b5c520a0261e","ssdeep":"384:kkob4oe1NtF30e9r76ZcADo318ySh5+vRCddehV8rM2u/WMZN1CDYkzjWvz78J3p:doeBF30436JDo31W+vR0Q0MHW42ki8z6","tlshash":"e4a2d5d967f9a3d0f406f3f48a1690b67f5b3cfe7225c6a883548d45d86206ec998cc2","first_seen":"2025-02-27T10:02:15.019057Z","last_seen":"2026-08-16T19:35:37.003969Z","times_seen":453,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/polyfills-TZUJCB6R.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.341Z","timestamp":1786908875341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /polyfills-TZUJCB6R.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 911115\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 05 Aug 2026 12:53:54 GMT\r\netag: W/\"4371-19fd1fcced0\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096df13b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49615,"size_decoded":21326,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24289)","md5":"3a0b6871600f84d9217bd90c46155a3e","sha1":"82b779d60bb4e65998c11deef491d3079b0b6ead","sha256":"030f429ef3142ee3cdc4d2fac9764ec04e16ce31165bb9ab46066216b9bf6015","sha512":"f1d4647db009d724f56209ff0ca0285d30ce5e04bc871ac580bebbf1969c967d2ca20dc97039de6007dc89295f87d9838153a41087a4d8bde18901874810ed48","ssdeep":"768:LHJR37IuiqJfVzIfTRA8cFyKi6scJduFl2+DP:LpdIRAfVScIKPxduO+DP","tlshash":"bc23868d7292f4ee07a3a5e9403f9806f3371874941dd169ebedd4d128b8e0d413abad","first_seen":"2026-08-06T11:09:01.876657Z","last_seen":"2026-08-16T19:35:36.999189Z","times_seen":6,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-eqwUEIQ5.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.355Z","timestamp":1786908875355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-eqwUEIQ5.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 1427793\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 31 Jul 2026 06:17:36 GMT\r\netag: W/\"130-19fb6d23000\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef32b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542,"size_decoded":1448,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450)","md5":"61cc7649b961ca165db15b707cb3b169","sha1":"e4ced2ec7a2fc714b771b1115668e593704f09a2","sha256":"099a0fb42436b09a529c7c598c7849e4a0e274e6e663472063dca2abd0d9d3fc","sha512":"791ebc73d321bbc38a0b70915fc5d9ade04c905ef2f6040bc1fe507f657b04638707e6512692f9ea3fa485506c588693866797a901cee9b904914e2af91c6a86","ssdeep":"","tlshash":"37f0c0ef31f072322bdb0936c1ab144aa33831205c2e5810f334e081b934eb52735d5c","first_seen":"2026-08-02T10:38:03.983475Z","last_seen":"2026-08-16T19:35:36.917346Z","times_seen":10,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DSf3iaAj.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.486Z","timestamp":1786908875486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DSf3iaAj.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:59 GMT\r\netag: W/\"37f-19ffb3f52b8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097bf72b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2297,"size_decoded":2143,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2202)","md5":"ab5a843bb2fd9e4137a6d97a6ba2f73e","sha1":"ec308d74ea77c30085f1a06c2d0085d009f857b8","sha256":"6dedede36d6d96a3c882f67faa638312bd032e7117b638e15068cf93f9b86a79","sha512":"bee55b39bc631b4bee95b9da28178f613ecce2835d0b212ec7b5e7a3011e7d393b28b9ec344255c9ed5bdfb09a4e48c19b75d6d66806545dd7c545f5b49aa2cb","ssdeep":"","tlshash":"7741c20b717770b722faa424c8524701712549702749d23d7fec9ce0a6daacd724fbb9","first_seen":"2026-08-16T07:47:50.148059Z","last_seen":"2026-08-16T19:35:36.9134Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BtOASQzt.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.488Z","timestamp":1786908875488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BtOASQzt.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:10 GMT\r\netag: W/\"e3d-19ffb3e9350\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf75b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11346,"size_decoded":5323,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6217)","md5":"a831a8f78d4d1371a4139d8f2cbd5a50","sha1":"0222f78780d21ae0bed87d86c72481bb7f00679d","sha256":"476bc6ea42e2942e552b116a5b9dd391ed4edcd995c9105ee35ecaf760886440","sha512":"8ffa5e11d637afe0f2cbf4d7773f95591688f773b79cba58a227d0967404f15e78a6a27cec0e10e109646465b48b00e597b28115e46860bbd88d62f63eb679ad","ssdeep":"192:RXjEF/bHFxELxSSIizLD9/Wa2aMJ+q3BL49aJEJxovpQNJAVx49JHi+2oco:RXI7bqSSfXBWWMJdMweJxovp88x4riTS","tlshash":"c832c66d733864334adf8c299437091bd74295869407007c32e8ddef56acc8d72aabb2","first_seen":"2026-08-16T07:47:50.167067Z","last_seen":"2026-08-16T19:35:36.926739Z","times_seen":4,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/social/facebook.png","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.502Z","timestamp":1786908875502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/social/facebook.png HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\netag: \"6a684f39-9a1\"\r\nexpires: Wed, 28 Jul 2027 10:46:07 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: vary_header_present\r\nage: 1673308\r\ncf-ray: a2c2e097df80b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2465,"size_decoded":3596,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"4edebe50e0322d9c9a18ae9545ca6eaf","sha1":"0ed972660abde62e2d000854b912412aa16b73cd","sha256":"055b86bac8b7e6902f4cce2ff8c77d055cb439f2f94e9c784c968a0f9a5fd7ef","sha512":"f96eb6083c7733b4171f4a56d0e6b729f46fab74ce090f351f485cdfc7c9164126f5d2eeb90931e09e89b7c6365120c4767e5c28fcc0c3faef4a0222601ad150","ssdeep":"","tlshash":"29510acff853f5c2c2caf52a0ec917369062e986647a85514319e83cce539f64435ec4","first_seen":"2023-04-17T13:25:52Z","last_seen":"2026-08-16T19:35:37.038384Z","times_seen":636,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/common/providers/evolution_origin.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.510Z","timestamp":1786908875510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/common/providers/evolution_origin.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 12:27:07 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"68c2c01b-884\"\r\nexpires: Fri, 30 Jul 2027 06:14:52 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1516783\r\ncf-ray: a2c2e097ef8ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2180,"size_decoded":2130,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"caebb9be6dac5397e781925b71f043a7","sha1":"7c40632ebeb2235746a7e90a6a253c2b8ea99dc1","sha256":"8445b0da0f6bf7b36b4f82278ef6d990fded3c01682ca82192ec4bd15a1508e7","sha512":"d995083f295d2bda98c03e836463997b08adccc99ac5b821787b9939e5aa2724ef719ea947b41fd8e06fb4e6650494d216edc2cfc9599651f88c88994c62204b","ssdeep":"","tlshash":"48412412430eeeb91c418b1345d55451726fee8bf830b2e879bb2113640ddd4c9b4aea","first_seen":"2025-09-16T09:34:14.225917Z","last_seen":"2026-08-16T19:35:36.988497Z","times_seen":360,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CdkUFdL72.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.565Z","timestamp":1786908875565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-CdkUFdL72.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 378584\r\nlast-modified: Wed, 12 Aug 2026 06:54:42 GMT\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Thu, 12 Aug 2027 10:24:51 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7c18b2-262\"\r\ncf-ray: a2c2e0983fb1b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1262,"size_decoded":1765,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1166)","md5":"37cbcb0487af2c2fb623e99848cbf402","sha1":"55f8df6210a355df9250c77ad5a9c63e3bc1f3bf","sha256":"6ba4149f098184ded4bffff17faa2a38a7b17c7882fcf7dc5221ab7504ed9394","sha512":"9d27072614fc62398ca9cd592846a522e70acbf7485315f717d8b5412da149e4e2da9158f07d0857f6069f181f13b8204d1efd14213842f6ea53ba974d174382","ssdeep":"","tlshash":"92219a92b9a4bc6f572ec72b5414010273ce7d8b2145d53dbb2936df60317206df56b1","first_seen":"2026-08-16T07:47:50.106044Z","last_seen":"2026-08-16T19:35:36.91154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DFllOERo2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.656Z","timestamp":1786908875656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DFllOERo2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:56 GMT\r\netag: W/\"902b-19ffb3f4700\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e098cfe7b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218796,"size_decoded":50226,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3233f23b97e16e8d6557495147e12688","sha1":"b8183fe2eab5540530ec85d910b39bd3254eceab","sha256":"2e69f2f37312d02b90c4bfffd897d1a6967f289616696fec9bafe89e90d625c0","sha512":"41ea44dbaff1e7ce0a9a905b3d8ae22cdbe4c5e33226b278bf8b9e5a358ba4156d6dfa87d99d3d20410b3ca873f89fb3e1a4671bf6f7fbb2cae07aa67c33c72d","ssdeep":"6144:bBt37Gh2OXOmm1QYflqgu42B2/kibjBnJ7G9auCcWSWM54+gN:bBt37Gh2OXbm1QClq4B9G98M0","tlshash":"bc241647ca7e1f798f42a390a31c30e7a37a91aca3f4d5e9b1abf5291585db6013c0c5","first_seen":"2026-08-16T07:47:50.114353Z","last_seen":"2026-08-16T19:35:37.07016Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zdassets.com/web_widget/messenger/latest/web-widget-5433-a211b31.js","fqdn":"static.zdassets.com","domain":"zdassets.com","tld":"com"},"ip":{"addr":"216.198.54.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:46.676Z","timestamp":1786908886676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdassets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 18:36:26 GMT","end":"Thu, 12 Nov 2026 19:36:14 GMT"},"fingerprint":{"sha1":"30:45:E4:D9:37:89:50:D1:0C:59:0F:F2:45:7D:C8:9E:28:07:E8:0B","sha256":"93:F5:8F:7C:96:E5:A2:FD:93:AE:76:34:21:9B:A8:2B:CC:DA:9D:C7:28:3D:28:41:BD:09:B0:FD:8A:A2:87:DC"}}},"request":{"raw":"GET /web_widget/messenger/latest/web-widget-5433-a211b31.js HTTP/1.1\r\nHost: static.zdassets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nx-amz-id-2: AK3x5Acw59gJ9wYCGNNegHALGB86ykggmr7b78q9O2hcWaBmldeHOluZIOCsSry9pWCll4OYuUyKt/2LOvO8r0uaq+PaRlrm\r\nx-amz-request-id: 7ZAZHFSB4DAJ4CYY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 12 Aug 2026 19:14:29 GMT\r\naccess-control-allow-methods: GET, HEAD\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 12 Aug 2027 19:14:28 GMT\r\nx-amz-version-id: TCMEOgIiYpf2vfPHFXQNqguuh1ZaLxug\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 296893\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfXefyiqeAiZMjqitDHIUQYFqZN2wx697CCSaOlLRS6e7jf0DoDn8NwYqvEZj6TqoykKkdrvQj6hCiLms14mffHdCrkyXLVNUGqknuiJcBApO22UHSUF9euRWXQJdc4VJkiQ3Fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\netag: W/\"171b58b17e374e6206422448bded11d6\"\r\ncontent-encoding: br\r\ncf-ray: a2c2e0ddaf850731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446116,"size_decoded":143209,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"171b58b17e374e6206422448bded11d6","sha1":"2c33294f16e7db5be59d464017a53107fac81570","sha256":"9e665b0ebb461993e2dfee193d44dbb13b07496738b56455aa348a62b86aad88","sha512":"b37cffc400292711e83718dd3068070b69cdbe49f9dc613fd2d0fa4bf8fe89c1e95aecf241329783b0cd0d8dffc72233a79b289a035ff5be9b071d8a9a9ac463","ssdeep":"12288:4a0cVzek/5xbez05mYf12MpQtJxbeyarp35Z:4LEzek/5xbez05xfpQtJxbCrp35Z","tlshash":"c0942aea71a5b03247e70aa550bb0105b7355d54340ac1a4f22cddef3daa44ab2b7f3e","first_seen":"2026-04-29T13:00:36.23222Z","last_seen":"2026-08-16T19:43:09.329556Z","times_seen":3002,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BJ6nIIe-.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.356Z","timestamp":1786908875356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BJ6nIIe-.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:45 GMT\r\netag: W/\"b9-19ff1fafa68\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef33b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":1296,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"56f5cbc1345202466e5183bb829f261d","sha1":"d99a7232438542c53385e028a0579cf919aae81a","sha256":"0821c2808e0b4fe73673f3f3167f2a54b094d5e3f4b36d97276cde2b58a08218","sha512":"cdc115079fbcb56274afe3cfeef843fa9bcd16720a6277d2b60b5631a0a3d46711692a04fd1c7f7b1d06d9c801165d8c927f05bf35f17cbc084e8d41a68e1cab","ssdeep":"","tlshash":"12d0a73585f87df211aa0ca48449d7870419a177e69f4254805a852947b4582a3fdb11","first_seen":"2026-08-16T07:47:50.074578Z","last_seen":"2026-08-16T19:35:36.963873Z","times_seen":4,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DC5oavYz.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.483Z","timestamp":1786908875483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DC5oavYz.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:55 GMT\r\netag: W/\"84d-19ffb3f4318\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097bf70b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8496,"size_decoded":3647,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8398)","md5":"d7fb3811f1893169e66b98eaa3625a18","sha1":"51606cf4984e7d226f8e93097362a1851f8589ab","sha256":"d6faa8f89e0f4502c08f606efcbbab2af9730d52cdf638f4eccb7334772ac81c","sha512":"8803524c6c79adb950e6406e0112723942d94ffa561d2c47867521f4b0182b64f2385c62ea59933224b16f76a5119d4cbcf05612fcf422890062e6576b03ff65","ssdeep":"192:9qR57xFPzTFiodk3AReFxICnC5avW9kAW1WmxEkbY0VhWuOGYb9GDn8GS7+tRduV:E5VQb7Kk8o/bvVwu/7kK/k","tlshash":"1c022f9663e2f4b0930a103998794f02e20598c5aa4dfc7cfd2257d32536d8a647efbc","first_seen":"2026-08-16T07:47:50.080515Z","last_seen":"2026-08-16T19:35:37.042279Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Bli_dumf2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.559Z","timestamp":1786908875559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-Bli_dumf2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 827629\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 06 Aug 2026 19:43:09 GMT\r\netag: W/\"1942-19fd899d8c8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0983fadb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20758,"size_decoded":8493,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20665)","md5":"8d4875bea3189f9ef6f66f8075f6d28a","sha1":"bb8dded3b85b95e59c4d00abd1060cc9b93ee8d3","sha256":"ece047599939c365db919185d2f2c60f0b0a920ba706b2f3279694a62ab9823f","sha512":"be2825325df249a61599abacb964b502c00a18f844e543b7a2bd8bff00f0dcd0e42679d419b9d1b06a8b65bd1f0ede0bd3e3dd668046dc66a7cd42d0697819a5","ssdeep":"384:0k3jykqngTKeAXH2vBDsfNT67JOia0KxaWy++HSf/BKn:p3jykIeAXH2efF61e0Rj","tlshash":"0e92d599231074b556df629642e88990a3b04880e40da66cb1f1cd9f1a7dc8827ffffd","first_seen":"2026-08-08T07:36:52.341078Z","last_seen":"2026-08-16T19:35:36.948575Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtime-838.optimove.net/reportEvent","fqdn":"realtime-838.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"136.110.209.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.876Z","timestamp":1786908875876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"POST /reportEvent HTTP/1.1\r\nHost: realtime-838.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Request-ID: d0412433-eae8-4698-9ebd-2997a5b00ed6\r\nX-Optimove-Auth-Capable: 1\r\nX-Optimove-Platform: web\r\nContent-Length: 560\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":560,"data":"[{\"tenant\":838,\"category\":\"track\",\"origin\":\"sdk\",\"event\":\"optimove_sdk_metadata\",\"context\":{\"sdk_platform\":\"Web\",\"sdk_version\":\"2.0.21\",\"app_ns\":\"yesplay.bet\",\"campaign_name\":null,\"campaign_keyword\":null,\"campaign_source\":\"affilka\",\"campaign_medium\":\"cpa\",\"campaign_content\":null,\"campaign_id\":null,\"language\":\"en-us\"},\"timestamp\":\"2026-08-16T19:34:35.850Z\",\"metadata\":{\"firstVisitorDate\":\"2026-08-16T19:34:35.848Z\",\"eventId\":\"f42aa4ac-65b2-4c39-b392-c6b9b78eca3d\",\"sdk_platform\":\"web\",\"sdk_version\":\"2.0.21\"},\"visitor\":\"70d2a801-ce96-467a-8b3c-b235405fe05a\"}]"}},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST\r\naccess-control-allow-headers: X-Requested-With,Content-Type\r\ncontent-type: application/json\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-length: 77\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'self' *.optimove.net\r\nserver: Optimove\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":559,"mime_type":"application/json","magic":"JSON text data","md5":"f8329ea616bc54fa39ae39463ec55d53","sha1":"259726080a5c59fbb4bd35b2ddea3f0049fc3058","sha256":"14811480475c2171ce84c472a6d16a5355ce92a03e8955814fde8827e8a34d55","sha512":"6cf0deed8d6de141c8b7e03df7ef47e436927e0b3a261a04bc9a540e0a46a20d3e24500e03fe4097d9adf26a2787bf8642e36962b40fd66448c3ea53683f1ed6","ssdeep":"","tlshash":"daa022023eb3003aec8c03008338bf08a22a00333080a000c0eebca0e2282ef3033c2f","first_seen":"2023-04-09T23:14:29Z","last_seen":"2026-08-16T19:35:36.997746Z","times_seen":2530,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/main-6OO4IXHA.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.342Z","timestamp":1786908875342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /main-6OO4IXHA.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:41 GMT\r\netag: W/\"4cdb-19ffb3e2208\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096df14b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72243,"size_decoded":24803,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31501)","md5":"f13d6220e937f8b0ec160e11ddec7e51","sha1":"653f05235a62ceed9ffd7afd1b3df30fee17d463","sha256":"78750d0be54815ee3bba2e33448faf91a70eedbbf144717d9c0f8a3c36a949ec","sha512":"87a565ddbe1cab13b8e968222d4f2e68592ec5f9f2828a883eea676779b31a520efa05369dca12dca70a1646622d6d69bbdb78bb75c0f7c2e67466b8b37652f9","ssdeep":"1536:ViPQzJzcuJamXZ5jVb+90xTh4chhZc2E4HlT:cG7n","tlshash":"6f631aab32e1b4754399853ad8274602f3275888150da03cfbed9cda75d5e4c62bfbb0","first_seen":"2026-08-16T07:47:50.175426Z","last_seen":"2026-08-16T19:35:37.00982Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/yesplay.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.365Z","timestamp":1786908875365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/yesplay.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 5767112\r\nlast-modified: Wed, 10 Jun 2026 10:45:49 GMT\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Fri, 11 Jun 2027 01:36:03 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a29405d-24a8\"\r\ncf-ray: a2c2e096ff42b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25059,"size_decoded":12024,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f931cb83be42f13d341481e46deae610","sha1":"9c03f6ff224616090cc53de321709ebdb90066b9","sha256":"4cf6021ddcd23b9e8148f1913e03a7c692a17fc35b5fe443b8bd200c05a6c96b","sha512":"7b03f7bec25d56c1a7a952241372c76f72dd3497b989c1b0c616f2c0c0453d3be61ee40f48d56ba98119d46b87158f0dafa87cd8af4664b74afb193d48c3aea8","ssdeep":"384:VbRrK/0WSgPQB5qudmGEaX7xZsygBq/up4g5fqeeJTgxfr5N1X1DFfRcNj:tJeSCgmGR8BNfttN1nR0","tlshash":"f9b213a6cbb58278d7d90b4489e01c563fd6441e32b8e3dcbb2fe560a972cb48078d5d","first_seen":"2024-12-10T08:36:06.644809Z","last_seen":"2026-08-16T19:35:37.035806Z","times_seen":643,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay9278.zendesk.com/embeddable/config","fqdn":"yesplay9278.zendesk.com","domain":"zendesk.com","tld":"com"},"ip":{"addr":"216.198.54.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:46.721Z","timestamp":1786908886721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay9278.zendesk.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 21:28:32 GMT","end":"Sat, 31 Oct 2026 21:28:31 GMT"},"fingerprint":{"sha1":"24:D8:18:97:A7:1D:D1:6C:90:F0:18:18:5D:48:27:DF:23:DB:7E:43","sha256":"E3:1B:21:C1:B3:F7:9E:32:D4:57:1B:FB:8C:06:96:54:1D:D5:09:62:0B:2F:DB:BC:04:FC:0D:48:10:7F:CD:D7"}}},"request":{"raw":"GET /embeddable/config HTTP/1.1\r\nHost: yesplay9278.zendesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 19:34:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600\r\nx-zendesk-origin-server: embeddable-app-server-76cbbcf7f6-k8qqg\r\nx-request-id: a2c2d3b859e43181-FRA\r\nx-runtime: 0.001557\r\nvary: Origin, Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nzendesk-service: embeddable\r\nx-cache-status: MISS\r\nx-zendesk-zorg: yes\r\ncontent-encoding: br\r\nvia: zorg\r\nx-envoy-decorator-operation: /embeddable\r\nage: 538\r\nlast-modified: Sun, 16 Aug 2026 19:25:48 GMT\r\ncf-cache-status: UPDATING\r\nset-cookie: __cf_bm=B1f675T3vgu2TeH7P1hjKH8s8Z1jfBNySSV0Ni8rXWY-1786908886.7523458-1.0.1.1-1CdcLHsXmDNuw_4_AeypwmzuAVzmJutlGz2h.Dc7b4xJKordvEUbV3_QaENcXIEuHSlEfBOhwTqUAbe.Zpyry.V_4NJ.Fwho7vukDKi5kLN0eLzWGBrPSZ.V9K6v0.Vp; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com; Expires=Sun, 16 Aug 2026 20:04:46 GMT\n_cfuvid=PSlKwr3a0CX3pcV7r0WrVwUojNIssZsbLt_.xlrNKCg-1786908886.7523458-1.0.1.1-ChAz.qXWRY243jkm8I5G0NmUBrXyIhEIQnw3YYA.5ZA; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14dmKu7vm254x1LRaMu%2Bc%2Fgd9sNdgoMlzzgIOjo8csIx1ihM67zjpJdghiOXPNdT0yhND6PI7UYSZNuZPkunNhQ1MXD7DXNPMe9eretS1RD%2BLs%2BtBiBOWVfLpQ3TJ%2FuBmEpew%2BPWznEa\"}]}\r\ncf-ray: a2c2e0de2f095687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"B1f675T3vgu2TeH7P1hjKH8s8Z1jfBNySSV0Ni8rXWY-1786908886.7523458-1.0.1.1-1CdcLHsXmDNuw_4_AeypwmzuAVzmJutlGz2h.Dc7b4xJKordvEUbV3_QaENcXIEuHSlEfBOhwTqUAbe.Zpyry.V_4NJ.Fwho7vukDKi5kLN0eLzWGBrPSZ.V9K6v0.Vp","quoted":false,"path":"/","domain":"yesplay9278.zendesk.com","expires":"2026-08-16T20:04:46Z","raw_expires":"Sun, 16 Aug 2026 20:04:46 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=B1f675T3vgu2TeH7P1hjKH8s8Z1jfBNySSV0Ni8rXWY-1786908886.7523458-1.0.1.1-1CdcLHsXmDNuw_4_AeypwmzuAVzmJutlGz2h.Dc7b4xJKordvEUbV3_QaENcXIEuHSlEfBOhwTqUAbe.Zpyry.V_4NJ.Fwho7vukDKi5kLN0eLzWGBrPSZ.V9K6v0.Vp; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com; Expires=Sun, 16 Aug 2026 20:04:46 GMT"},{"name":"_cfuvid","value":"PSlKwr3a0CX3pcV7r0WrVwUojNIssZsbLt_.xlrNKCg-1786908886.7523458-1.0.1.1-ChAz.qXWRY243jkm8I5G0NmUBrXyIhEIQnw3YYA.5ZA","quoted":false,"path":"/","domain":"yesplay9278.zendesk.com","raw_expires":"","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=PSlKwr3a0CX3pcV7r0WrVwUojNIssZsbLt_.xlrNKCg-1786908886.7523458-1.0.1.1-ChAz.qXWRY243jkm8I5G0NmUBrXyIhEIQnw3YYA.5ZA; HttpOnly; SameSite=None; Secure; Path=/; Domain=yesplay9278.zendesk.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1660,"size_decoded":2404,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1ad8cb0bb1f59bced2e30a835cd9af6","sha1":"c41bdac0ef2539142e912db5c892d20d5c7d5886","sha256":"5813bd98d4ebb9902654d69cf904ebea9ed0f3d279d8f1e0c11e943ff5622ff1","sha512":"e5fa07a90a83a581de7cdc5f084626b24f0d844f3d4f587a6ab57bf975578850067fd09935924e1112c810ebc7c4a5c6f9400a932da781879ad76ddfb4958f28","ssdeep":"","tlshash":"26319a99dd0974bec442c362e095ba032b7d8e7b2354756cb88c440d60ff0ee1653b67","first_seen":"2026-08-08T07:36:52.331797Z","last_seen":"2026-08-16T19:35:36.907452Z","times_seen":4,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":34,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-C9Q6Kia8.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.351Z","timestamp":1786908875351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-C9Q6Kia8.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:05 GMT\r\netag: W/\"162d-19ff1fa5e28\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef1eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20099,"size_decoded":7719,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19981)","md5":"e6144a1b256b9104232f32b9292bdbf5","sha1":"0e286342466f5d1c99b42daccb918c98a91fecbb","sha256":"2032502c52d3fedd898a53085c635c7d011a98306e4aa80fa4b9aba3ee94064e","sha512":"a50af499b11378306ba2c2b3bb5a9fad8c94838bc9534fe74c64c4e9fca1e5707e10af1d57a20ac92cf403f78788a27d02a498001a549c250bf432222b865a67","ssdeep":"384:HAxHnPIlBQL4X1A/ga67l+JcLdzbncQ6Lw3L9WgU:HARnPIlKL4ta5Q6Lw79WgU","tlshash":"229254d931f7e420438a821a96664593f23da9d4543a882cf7266cdbbcd4d0e47bfb70","first_seen":"2026-08-16T07:47:50.124588Z","last_seen":"2026-08-16T19:35:37.020444Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_slots_7a58e173ab.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.464Z","timestamp":1786908875464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_slots_7a58e173ab.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-a67\"\r\nexpires: Fri, 30 Jul 2027 16:15:31 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1480744\r\ncf-ray: a2c2e0979f5db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2663,"size_decoded":1942,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf9ec6d8888a7da2eaaba2842833ea85","sha1":"3b2e794fdca2da331e8fe8f15a002a45fcf8af5e","sha256":"79bc65fd8ae190fe8cb95e7d3a6dc3cb9b64b06f26624c5dcee2c84f7f536914","sha512":"909e4b748e3fbcf05340b4f03f2cb805811393f8844f6b5b0b562f62b19272c230bb80533559a5e1551706bad8282b728cdb74e53811276600d205b213b2f377","ssdeep":"","tlshash":"7051ce1781dd48b0d3674104edad3aab89783825aeec4ce426d607117d34ee9aed68bc","first_seen":"2025-06-19T22:33:41.418164Z","last_seen":"2026-08-16T19:35:37.011488Z","times_seen":608,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/fonts/open-sans-v26-latin-700.woff2","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.338Z","timestamp":1786908875338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/fonts/open-sans-v26-latin-700.woff2 HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 28 Jul 2026 06:42:01 GMT\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\netag: \"6a684f39-3fc4\"\r\nexpires: Sat, 31 Jul 2027 03:28:24 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 1440370\r\ncf-ray: a2c2e096df10b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16324,"size_decoded":17396,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16324, version 1.0","md5":"1b558c68c0c5c4b0489df1d5b7b455cc","sha1":"b912b613c6155da9bf463d336f3e8f86fd12a4de","sha256":"eb0d3e86a0d3dffd0c2d917f5b309a189f78110ee62373666161a018036da1a1","sha512":"de085e10bdc76c5f42b0f2ad92da26ec1cf4ef012c0b374b428916eb8829d93c7566e0025577d283f4df13f8538e8a79568bc3ab3427c154545f111aa26b286b","ssdeep":"384:lAKqK8kiP2o4r0TUzTbk9NIIbl0Nx0i98/I5pG:lAKqxrP2ou04zT4f3Ex0B/I+","tlshash":"1672cf36cf4cbf20c1236e3857d5568f6444f680917a8ef2d84a384ae52646327bd6fb","first_seen":"2023-05-07T17:30:13Z","last_seen":"2026-08-16T19:35:36.916626Z","times_seen":865,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-qsAjmtwO.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.481Z","timestamp":1786908875481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-qsAjmtwO.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:36 GMT\r\netag: W/\"2774-19ffb3e0e80\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097bf6eb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45101,"size_decoded":13130,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44977)","md5":"b938c787eb7510968c9691a587fb97c4","sha1":"562053504d1114e70249a94dad83c2fd260cb0f5","sha256":"bbe6d77cbef342cd770e48c4efb3cb11acd67bede40ea54314b0f3e17620aaca","sha512":"af59a1d2f4d625326aa07a2ff3d548f091bfb7f6b4e0873c54ba7f7287219b51cee66c4bd5d4f90c86dfae1127d264402095fe10e5b5d70d087f5764a1f808a8","ssdeep":"768:bQ9jwWztVc0NJ3+INKZS7Eb2gTHZwYPOxjAJYYErzzsSxTbofjZRGbsIdaun91RV:ejxtVc0NJ3+INnYujQu5kb65Myx","tlshash":"a013a78373f574f003d967a16c244ac2e32688d8d88f895cf991b4cbed75c06a5b6bb4","first_seen":"2026-08-16T07:47:50.083472Z","last_seen":"2026-08-16T19:35:37.003179Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/uploads/icon_product_casino_e0c8316dc4.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.466Z","timestamp":1786908875466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /uploads/icon_product_casino_e0c8316dc4.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Oct 2022 20:17:40 GMT\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\netag: W/\"6356f2e4-1def\"\r\nexpires: Sun, 01 Aug 2027 02:44:27 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncontent-encoding: zstd\r\nage: 1356607\r\ncf-ray: a2c2e0979f5fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7663,"size_decoded":3101,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"948a2d3239319d3b5049e080d27e3cd5","sha1":"fc5c8cfeecf5570fa576750644020ba121ea0b5b","sha256":"8fbd40e12d98f96aa8a766ea97c67e3b7a4a4991f183e7e7115eed5b5e93e608","sha512":"c2fcffc650688d3fd3a589ff0ec8aa1e074c2237a0564b0f72f6bc8a9494edfb02b1570c9c183f847ab400895e14349cb6602f99a7f9c3f68d9ffc3144fe2fb7","ssdeep":"96:+KtitAE/jpKyqa5DvYcKSJvON7sbjnkQYrFN/Nj:ZtitAoYYNvYchJGNPFJJ","tlshash":"24f1d0110bdda159f34a6a85eeb43afa2332308f9bcb4d50c16168706bf1ce45a38ddc","first_seen":"2025-02-27T10:02:14.948205Z","last_seen":"2026-08-16T19:35:37.024658Z","times_seen":609,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BywRv3-T.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.487Z","timestamp":1786908875487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BywRv3-T.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:12 GMT\r\netag: W/\"33cb-19ffb3e9b20\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097cf74b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57676,"size_decoded":16991,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (36241)","md5":"b958981adbb1134aa8e2e2353ebd2830","sha1":"697c00850b0b8531df25936cd1eeb346e8fd5a3f","sha256":"3b1bae3e7e5749aafb71089689613468d12561dad0ea419de1c91eba67c36304","sha512":"d82a0c0e08ad60316676513fb91892f0eaafe92c4fe4dc31c37ca6690e987ef5df6fa5f2827acd39e3fc6c62e0c0f903c0dba0755070b0a829a88a1b282ed1bc","ssdeep":"1536:c2lnfppWhV+nr9doUpz50t4Kp+skZiW49h1D1WCuCTd3xb:5UV+nr9doUpz50t4Kp+skZiW49h1D1Wq","tlshash":"c243b4643314641183cfe11bc0b7060ba33a69468a0b815c72bc9def5b5ee59b27bbf5","first_seen":"2026-08-16T07:47:50.177006Z","last_seen":"2026-08-16T19:35:37.027685Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-j4z1qCMW2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.752Z","timestamp":1786908875752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-j4z1qCMW2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-BJ_hLO8k.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 281345\r\nlast-modified: Thu, 13 Aug 2026 13:25:00 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Fri, 13 Aug 2027 13:25:30 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7dc5ac-d5b\"\r\ncf-ray: a2c2e099680ab28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10971,"size_decoded":5206,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10776)","md5":"b9c25c8c05601bbdbbf80c5fd0acf1a5","sha1":"089e6c2e1da7a7d99af250860614e3aa0730b2a9","sha256":"f7b69f676e0068ef0db00ddcd3c4a1bd4e5705c7080d2c1f826a578985e996df","sha512":"eae343e1d7db4d38868911fd0950b1f0ff93a3034aee15f31ca7d69bde4d6c9cff46a66b017125580c9d24046251da368f6e4ff44af7ad783c40c39f85ce1138","ssdeep":"192:CmQ2neXndiK5xZ5trdwfV16lsfvnJan6jKqNUIS8eo38IOCRVKCFSidoZ4I0:W2neXn+zuqBSS3/jRwC380","tlshash":"3d32f8b351e030f911a9cd48e806520242e67405d14ba21e7fae6cea52f9d8f7fac7b5","first_seen":"2026-08-16T07:47:50.123092Z","last_seen":"2026-08-16T19:35:37.079232Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-CePBU8n3.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.780Z","timestamp":1786908875780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-CePBU8n3.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-j4z1qCMW2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391176\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:19 GMT\r\netag: W/\"78f8-19ff1fa94d8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e099981bb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154848,"size_decoded":41548,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"39202815bc25964c11f2c98967ef9ef3","sha1":"1cd90d69f104ef57f749604248cd3c8c717ed883","sha256":"e204117a17b310885fa98fbb722a76187032a2d2f8dc743d5f43de56f2ce09fc","sha512":"39cc8ce137b28bed5ca37ec8f3b86f20709fdb78071a1202c50a7c6139e22fc980b46b44691da7a31a2fdc81d9119806286f4bd38e1b9dcf1767eea4b8365b8f","ssdeep":"3072:t03E4v8jbJ44M05EOrALYh7abLf6nxesec:Vb+4M05Ewa/Sxesec","tlshash":"d5e395f7b980b373b6e63918811a420c961ecc1aeccd540d9ee6f4db5db191434bdb2a","first_seen":"2026-08-16T07:47:50.162209Z","last_seen":"2026-08-16T19:35:37.047058Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/chats.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.469Z","timestamp":1786908875469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/chats.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1378300\r\nlast-modified: Fri, 31 Jul 2026 07:24:07 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Sat, 31 Jul 2027 20:42:55 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a6c4d97-20b\"\r\ncf-ray: a2c2e097af62b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":1645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8550d2b9f78d9f93d149598de2fc845","sha1":"41102005f53e7e82c89d2a532cf7ed66e704d52c","sha256":"a271de318b157db6e66bd58d737985e5824dabbdfd66d65c78b551979ccdb846","sha512":"560440943bf9e28d634f3846aadb6ffd9eae2eda8631d51adc34e1dbf2d047707500df55df45bce62178da5c01252f081a54324b0c157a39ac8df6239a7365d9","ssdeep":"","tlshash":"542176f57b7a80bc51c72b4aae621784af2fa07973a021c0c88dde7d8483c91da07e10","first_seen":"2025-06-19T22:33:41.445275Z","last_seen":"2026-08-16T19:35:37.037168Z","times_seen":608,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D2VoIFV7.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.480Z","timestamp":1786908875480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D2VoIFV7.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:48 GMT\r\netag: W/\"632-19ffb3e3d60\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e097bf6db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6391,"size_decoded":3043,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6296)","md5":"a5fe1d1db4af0777aef59f3a83a53ea4","sha1":"5a92ca52804dd0a3423318d5537f1bbb8feb2c4f","sha256":"62876ef43effd173d449437f726b0f02bfe26762e32c1d457bbbe3925eb5eb6f","sha512":"1df36a6ec5c12c25264f7837554e43e89db5757a06e99506444d70a7df72ca042eda367d597741db9692e07502e23d0ef2154e6091d601746c14668169f7c65c","ssdeep":"96:pWrWJWkWb7uGeLPqE2WkvLXUvUW7GsDpNKD41GBYcMhrkfs:4CYfPuD2WkDXUvUW7GsDpNKD41GBxOys","tlshash":"09d19d8133f37544838e426ab4a01de2a1940dd444297b7af858f64eeeba4c5d0f7be5","first_seen":"2026-08-16T07:47:50.165392Z","last_seen":"2026-08-16T19:35:37.047694Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/assets/images/svg/download-ios.svg","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.498Z","timestamp":1786908875498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /assets/images/svg/download-ios.svg HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: image/svg+xml\r\nage: 1284619\r\nlast-modified: Fri, 31 Jul 2026 07:24:07 GMT\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Sun, 01 Aug 2027 22:44:15 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a6c4d97-ba1\"\r\ncf-ray: a2c2e097df7db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9359,"size_decoded":4449,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12dba5330775989e89aa507c7afef535","sha1":"5a7c3e4e66b06503edbc8ad121b3c0d4e8280deb","sha256":"2c65ad818869a0e1c63f3cca8d6b3deee029f3c693373037872be8074401333e","sha512":"253e128bd9a2e00c6939891cd591cc908b9f07a4eeb3cca5338a2b2f52fe437119c5d23f8bf0ac34f97ff14212f7541c2c73fd262c4c2656fb54ef30b78abafe","ssdeep":"192:zqEx4ztjs/MIdKirqVc47bm+7HGaSx0nY3:2Euz8zBqVc4m+OxU+","tlshash":"f91285ee97d4e2d0e806f3e9c91b507e3b1f28fbba52e5588f483d0a7b4506d48589c0","first_seen":"2025-06-19T22:33:41.454884Z","last_seen":"2026-08-16T19:35:37.025264Z","times_seen":434,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-bPCEndxA2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.551Z","timestamp":1786908875551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-bPCEndxA2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:09:28 GMT\r\netag: W/\"e5e-19ffb3def40\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0982fa3b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11909,"size_decoded":5461,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4901)","md5":"a45360fddedb8f93d895c1e56c9ccf06","sha1":"f40bdaf381222c2cb380cc2d0c1898f9e27c2d74","sha256":"c9746a6ebfdcff9449e0d933ff04c39a766efe53feeef21aa1d0ac1b09382f86","sha512":"c5d12d71eb0cc82acfcd0df3127565b6265ce7308be20b66b016221ed129413e20d3855ff2031a2226a3bd4281e794a3f36c280f599bffe182db593ec2291358","ssdeep":"192:Defp5xJDE/B1pFzxw7TeZe3YiaiciObMP1xQp8dQ+doiiYht9q6kmES2TrTVFLq:kSe3Yh9cPUedQ+ddi7SkrC","tlshash":"4732e8bb31b424bd428dd4438c777397e2785094e10992ddf738a8cc25ead99e16837d","first_seen":"2026-08-16T07:47:50.046482Z","last_seen":"2026-08-16T19:35:37.010434Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-Bh00LLEw2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.748Z","timestamp":1786908875748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-Bh00LLEw2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-DSf3iaAj.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391187\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:50 GMT\r\netag: W/\"2f07-19ff1fb0df0\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0996807b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42089,"size_decoded":15346,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"664cbae53ca9355d24ee013f956ce9f7","sha1":"2c461a8672cbdd5468f238ec5d31c0812b79974e","sha256":"37b50e91a7c40f631e75fd6ea0611aebddde918d314eaa9c2760c89818798514","sha512":"583bf0e32d51892e66c899592d6b0338a6d76d40c633dd86ed3ba1337fe9425428f1af190427b879ba206cda071c8c11dfa6d9d9e42625eeb9656cd8905e358c","ssdeep":"384:8WOEN/5wiiXnNdy9IOIvcf18y78Ne8jOd2QObg+DJK+U0F1l5Uru7/JafSWmHY2+:8WOE1isrojOG7DJKg1lQ+Afl","tlshash":"4013cac4b36160a283d6e123c0b51503f329a5455809451cb768eefba9bdec971f7fb2","first_seen":"2026-08-16T07:47:50.134519Z","last_seen":"2026-08-16T19:35:36.912429Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DgO6pKae.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.352Z","timestamp":1786908875352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DgO6pKae.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 18:01:02 GMT\r\netag: W/\"15f8-19ff1fc2730\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef25b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19654,"size_decoded":7633,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19550)","md5":"23d5d16b092ea668ece24ebf6d9ff3c8","sha1":"f3ba85985b0131c644f6a9071389a844fd16262a","sha256":"6748e9d6a2efca7f338e09b7135c8e03fd1687f04c645c7d784cc5a49ae55cdb","sha512":"d2cdcc1f3b482404b0ba0b3ebc91db3563542b6a58ca84ba1c9dcaa99fde59e9e0b78701cb536b97b66f7e47fc9e42b855f79b9a523365dbfda5ae95e901a801","ssdeep":"384:nm5RiAnGTLiEa/BoMJC+SBs/MO4G9ZpjvixCqNtI:knILihABot4G9ZxaxCqvI","tlshash":"3192b69532a5b031138ec46a80260543f32b75aa554bc03cb57ecdee27e5e8463f6b7a","first_seen":"2026-08-16T07:47:50.10439Z","last_seen":"2026-08-16T19:35:36.908233Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DzfqlSBc2.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.556Z","timestamp":1786908875556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DzfqlSBc2.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 827628\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 06 Aug 2026 19:44:19 GMT\r\netag: W/\"48cd-19fd89aea38\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0982fabb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66536,"size_decoded":23039,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c54d7c0b37f9c25aff3f3932a45378f3","sha1":"11b6f3d354032ca323ea6a1f1a31adceb1534466","sha256":"0508950073628b5de6cc77127b57ea3caa4bb6edca62955b784eaa131d49d85d","sha512":"1f75d926ddc0639b3156deb44daf59708af1d46dd2361334028dac3224a11257a958fd7bfdebddc4956cb385f034312120f28aba45c4096fa457d179b6c6e51d","ssdeep":"1536:W04YX77i8vlHbYvDaWWD2RbCho/1bAbtVaztHSd7XiIbku4exxSkQ:We7XTCwM1sbgtHciyxi","tlshash":"49531999a230b53683eb124a9399c542b3e50884b88dc46c75f88c6b19bdc5c07feff5","first_seen":"2026-08-08T07:36:52.393174Z","last_seen":"2026-08-16T19:35:36.914418Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-JErO1Z4p.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.567Z","timestamp":1786908875567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-JErO1Z4p.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/chunk-D-jOTT0c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281369\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:11:04 GMT\r\netag: W/\"696-19ffb3f6640\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e0984fb3b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5238,"size_decoded":3060,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3243)","md5":"debafd6b3d855c9926f8d6bcc7ae2ed2","sha1":"c39f043afde87556baa28061d8f2cf1d18f7c516","sha256":"9f657dc9d611d810af7c853ad3f19aa8957873e3f2f1357e09fe3b84ff51af35","sha512":"a4e47c3d35f5f2dfe3d346e64416e1d65d27bd21abcac57d2cfb39aec8ed0996ba805b42c7743aeb738e5b247d8c7a10e3d77b727d29b9b117ba28d728ffa9fc","ssdeep":"96:2Y5cS509ZBmA2nq/QAK/hGUu8rZr1LDebm81Cn2W:j509Z0A2nqoAK5GUuAWSZ2W","tlshash":"3fb1c9b630c0b8da9357c4e6803fd38d52696067a53542ee342ee8ed66b1084bf3b039","first_seen":"2026-08-16T07:47:50.131433Z","last_seen":"2026-08-16T19:35:37.048334Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PGLZXW7\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.756Z","timestamp":1786908875756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtm.js?id=GTM-PGLZXW7\u0026gtg_health=1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\nexpires: Sun, 16 Aug 2026 19:34:35 GMT\r\ncache-control: private, max-age=900\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":216,"size_decoded":555,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-08-16T21:07:07.377554Z","times_seen":36886,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtime-838.optimove.net/reportEvent","fqdn":"realtime-838.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"136.110.209.81","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.881Z","timestamp":1786908875881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"OPTIONS /reportEvent HTTP/1.1\r\nHost: realtime-838.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-optimove-auth-capable,x-optimove-platform,x-request-id\r\nReferer: https://yesplay.bet/\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type,x-optimove-auth-capable,x-optimove-platform,x-request-id\r\naccess-control-max-age: 86400\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'self' *.optimove.net\r\nserver: Optimove\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":535,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:08:34.401832Z","times_seen":17924563,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":8,"connect":12,"send":0,"wait":51,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stream-838.optimove.net/","fqdn":"stream-838.optimove.net","domain":"optimove.net","tld":"net"},"ip":{"addr":"34.144.193.179","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.875Z","timestamp":1786908875875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.optimove.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Thu, 04 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:49:0D:15:22:59:4F:52:1E:49:7A:9D:3E:59:49:46:3B:82:8E:0A","sha256":"17:BF:5E:9B:73:DC:B9:F7:AC:A5:79:83:3E:D0:7D:A3:1F:01:60:83:74:52:9D:85:97:97:A9:69:5C:A1:97:CB"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: stream-838.optimove.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Request-ID: bbf15eac-adff-40a5-9a27-be793d8f7e9c\r\nX-Optimove-Auth-Capable: 1\r\nX-Optimove-Platform: web\r\nContent-Length: 560\r\nOrigin: https://yesplay.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yesplay.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":560,"data":"[{\"tenant\":838,\"category\":\"track\",\"origin\":\"sdk\",\"event\":\"optimove_sdk_metadata\",\"context\":{\"sdk_platform\":\"Web\",\"sdk_version\":\"2.0.21\",\"app_ns\":\"yesplay.bet\",\"campaign_name\":null,\"campaign_keyword\":null,\"campaign_source\":\"affilka\",\"campaign_medium\":\"cpa\",\"campaign_content\":null,\"campaign_id\":null,\"language\":\"en-us\"},\"timestamp\":\"2026-08-16T19:34:35.850Z\",\"metadata\":{\"firstVisitorDate\":\"2026-08-16T19:34:35.848Z\",\"eventId\":\"f42aa4ac-65b2-4c39-b392-c6b9b78eca3d\",\"sdk_platform\":\"web\",\"sdk_version\":\"2.0.21\"},\"visitor\":\"70d2a801-ce96-467a-8b3c-b235405fe05a\"}]"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 50\r\netag: W/\"32-j9LRHjiDJhfXmhzPbfQo0JQXvUE\"\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'self' *.optimove.net\r\nserver: Optimove\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":50,"size_decoded":439,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"13be0c03bba4e743c04b05a68286f21f","sha1":"8fd2d11e38832617d79a1ccf6df428d09417bd41","sha256":"b9fdbdb39c7dd357bad9b4c5971b07ee8f3fc87a1248a5fc47f0795737aad8e0","sha512":"c678f3ccf5cb52aea00744b6b220cd6964f0aad3222d3ad25544668f4f78851924c6017c218ca9dcdc2430ac6f0f0129a69a912c4afb0179d5db0a76c2867cfe","ssdeep":"","tlshash":"e8900205414d7cf4274178d16404192029d115c1c1a51192c11d101aab1155ce047101","first_seen":"2026-08-16T19:35:36.823709Z","last_seen":"2026-08-16T19:35:36.823709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-DGiXQp9P.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.357Z","timestamp":1786908875357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-DGiXQp9P.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 281370\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 13 Aug 2026 13:10:57 GMT\r\netag: W/\"36f9-19ffb3f4ae8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ff35b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53789,"size_decoded":17750,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26174)","md5":"1985a712427abce93f28925e7c043916","sha1":"82479942d73eb520781c781b2ec633b8b1e9a8f7","sha256":"91d98edce5753b0877f56015c0842d45aa0e034b4cc5c0690fc956715c8a4122","sha512":"877a4452c6906e17b048bc330774338e26b81deab68d842133c785911ffa7092cbbca648604f19d0f2954d5d73e75a8dc3329802cd3d2db84135382886b736e0","ssdeep":"1536:B9jkHX3kCk5J3+TAjNFFK8QGJTSjz7QXbxER:B9Ank55Jcn","tlshash":"fd33e896326175330bce915ba0b94207f72a64d4541a442cf07cdcef2a6de8873b6fb9","first_seen":"2026-08-16T07:47:50.042688Z","last_seen":"2026-08-16T19:35:37.000598Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/analytics/","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.358Z","timestamp":1786908875358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /analytics/ HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a2c2e096ff36b28a-OSL\r\ncf-cache-status: HIT\r\nreferrer-policy: no-referrer-when-downgrade\r\nage: 1548\r\ncache-control: private, max-age=900\r\npriority: u=3,i=?0\r\nexpires: Sun, 16 Aug 2026 19:08:46 GMT\r\nlast-modified: Sun, 16 Aug 2026 18:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432478,"size_decoded":143118,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19941)","md5":"29690376f57d108b8e1b9fdf789e2651","sha1":"fba02ff476ac81dd7c1cf5d017b874a3cbbd819b","sha256":"80d1f521306a4f23688a9c9b2da40cfed936f0f6be304e564c53389983bc0f31","sha512":"a462039a055c4771d7b618f490b6623a8df63659c7a9d9f749af20fd012ca605d49fef591fd9d8278c333abf52230c2f296a23ca1ca1dff4ba0c36a1647ca0c8","ssdeep":"6144:2brMXTBD/1ESc0lXD82xJ0hcgLsegErl3POCY+Uy/N:2brO5lXFxR+Ue","tlshash":"2694f7cdb3d674669392a474503f018bb67e28e2f44cd895f089ccd42e74aaa5223f7d","first_seen":"2026-08-16T19:35:36.827658Z","last_seen":"2026-08-16T19:35:37.021264Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T19:34:35.080Z","timestamp":1786908875080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a2c2e0955ed1b28a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: yesplay.bet\r\nage: 881\r\nlast-modified: Sun, 16 Aug 2026 19:21:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nvary: Origin, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nreferrer-policy: same-origin, no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155059,"size_decoded":30003,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9677)","md5":"98578151cdce200adf5d5fa37bc2ff4e","sha1":"dd5cad6c03d2df4128d458f24e9868c9b14eef85","sha256":"b67cf8e535ce5b7ce210f613cd98a95bba61c649a9719365d9982a413fadb28f","sha512":"e9e2e0e0e280ae0783b5599e90bedad23eee61fa9489db812640476a91099a208b002cc3ac62f7f30bb8bea1cf6f8e86aae361ab024a2e14b4a4bcda6e4447cd","ssdeep":"3072:hkujWe7y7J+yy0GA2HPc3nlnEIyiUtZnlnXLmW1goYco9WDXzfSiDShawD/:iujNE5GA2HPc3nlnEIyiUtZnlnXLmW1Q","tlshash":"6ae3e860d320353e2963b77ad472be68bfc8d846d6720548f38cae1c4bcabf5516a315","first_seen":"2026-08-16T19:35:36.832679Z","last_seen":"2026-08-16T19:35:37.002461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":7,"connect":9,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-D-GqWASv.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.348Z","timestamp":1786908875348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-D-GqWASv.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 391189\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 11 Aug 2026 17:59:29 GMT\r\netag: W/\"102a5-19ff1fabbe8\"\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-ray: a2c2e096ef18b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226504,"size_decoded":79966,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35602)","md5":"b6cd1986ae086b903fd3c624ecb1e75f","sha1":"b87ffcf6d5a519937cd2462ab02a670253b3385e","sha256":"94156e8c223d3e19154a6d1ae79cdf31c322f2324811b83c5bb3a5ebe59daa28","sha512":"7e9bfda410580ed3a3ee6e5f1ace649d373ff35435f17de163a8bc38522505fbafede74b138235a4e91c9dcf2976230c93e0e3d90757ddd7a346c312c4d49d8e","ssdeep":"3072:gRcuPgM9eZSeJDSFeJb7W0k+IX7CsSCUBYejVNdZ9JtddKta4RQNyXrSxb82vyZ:Fue+2AC7YiBZvdKI4RUrRyZ","tlshash":"bb24c5e836a5b02353de157a80bf0403f36968861c4e442cb168e9df7a71959a3f7f78","first_seen":"2026-08-16T07:47:50.151536Z","last_seen":"2026-08-16T19:35:37.041399Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/chunk-BJ_hLO8k.js","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:35.658Z","timestamp":1786908875658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /chunk-BJ_hLO8k.js HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/main-6OO4IXHA.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:35 GMT\r\ncontent-type: application/javascript\r\nage: 281349\r\nlast-modified: Thu, 13 Aug 2026 13:25:00 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nexpires: Fri, 13 Aug 2027 13:25:26 GMT\r\ncache-control: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\netag: W/\"6a7dc5ac-392\"\r\ncf-ray: a2c2e098dfe9b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2426,"size_decoded":2148,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2322)","md5":"97603f329c496ebe7b20f30877722d3f","sha1":"5e7517041b35601fda921349bc7026b73911420a","sha256":"61ffe2cbe3e75e5a3a7b6893ea455f0c6240ef1322d5d1af25aa8b84a8ee4aeb","sha512":"5e25752e4c8c7483aeddd05c5e87874a714073f83206084a5332db13bdce15933f3f1b780c79d647f17c11797a53608fb92c0981585c425c5a72532684025f9c","ssdeep":"","tlshash":"c341ff6bb0c1f0f005a9dcb5c010c322d12718821398e739f6dd05a62a97c9af3bda66","first_seen":"2026-08-16T07:47:50.092924Z","last_seen":"2026-08-16T19:35:37.005628Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yesplay.bet/favicon-16x16.png","fqdn":"yesplay.bet","domain":"yesplay.bet","tld":"bet"},"ip":{"addr":"172.66.149.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka","date":"2026-08-16T19:34:36.317Z","timestamp":1786908876317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yesplay.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 15:32:36 GMT","end":"Fri, 30 Oct 2026 16:32:23 GMT"},"fingerprint":{"sha1":"E8:15:65:1F:1E:6B:93:DE:2A:C6:45:CD:BA:8E:59:19:BD:54:57:FE","sha256":"44:D6:97:3B:CB:EC:E8:89:8C:95:20:94:2D:FC:6E:7B:80:C7:CA:54:78:21:5D:85:2A:23:85:F0:A6:ED:B5:78"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: yesplay.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yesplay.bet/sign-in?stag=134789_6a8210cb72ee96f9507f6a91\u0026utm_medium=cpa\u0026utm_source=affilka\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_6458J4YNKF=GS2.1.s1786908875$o1$g0$t1786908875$j60$l0$h0$drGZRth-Nnhw1IVImudSPtbf4lweLKg9mJw; _ga=GA1.1.1391631391.1786908876; firstVisit=%7B%22firstUtmVisit%22%3A1786908875971%2C%22firstUtmSource%22%3A%22affilka%22%2C%22firstUtmMedium%22%3A%22cpa%22%2C%22firstUtmCampaign%22%3A%22134789%22%2C%22lastUtmVisit%22%3A1786908875971%7D; referrer=%7B%22customerId%22%3A%22AFFILKA%3A134789_6a8210cb72ee96f9507f6a91%22%2C%22source%22%3A%22AFFILKA%22%2C%22date%22%3A1786908875972%7D; DV_TRACK=e415536e-cc23-4426-bde8-994632283a3a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 19:34:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 09 Jul 2026 05:27:56 GMT\r\netag: W/\"3c8-19f4558cf60\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: yesplay.bet\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src https: wss:; script-src 'unsafe-inline' 'unsafe-eval' https:; connect-src https: wss:;  style-src https: 'unsafe-inline' data:; img-src https: data: blob:; font-src https: data:; object-src 'none'; media-src blob: https:; report-uri /csp-report; report-to /csp-report\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin, no-referrer-when-downgrade\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: vary_header_present\r\nage: 3224688\r\ncf-cache-status: HIT\r\ncf-ray: a2c2e09ce904b28a-OSL\r\ncontent-length: 968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":996,"size_decoded":2124,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"39fddb0e0c2f4ee74c517eaa3b3a1b43","sha1":"c55304341b69552149d370b300915954199421f5","sha256":"1ea1c506e0c225ea6e579df57d96a1dd13b5e9bbd8394fb324d1e36bdeb6fadd","sha512":"cd3f0d07c08685dc03929e5d78731c0203098e8c2063da9f356815f45e2a812820f5d2261d0d1e3a038d76e910294ae3adc8b8af314b7100809a10cbb678adb6","ssdeep":"","tlshash":"c11165d6b1228667c80c230417426308db69c6974a52842df118d92d6b58a88885ce82","first_seen":"2024-12-10T08:36:06.624667Z","last_seen":"2026-08-16T19:35:36.918875Z","times_seen":414,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}