{"report_id":"506ecca9-b09b-4b76-80c9-faf2a8671d79","version":6,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-02-22T13:38:38Z","url":{"schema":"http","addr":"play-sweet-bonanza-drk.website","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"172.67.181.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"play-sweet-bonanza-drk.website/","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"title":"Facebook","dom":{"size":445387,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"33d974d91b1ce9a46af7a0bf4ae10607","sha1":"c0be818a7f23405c37c7f2b00312eb48e6402f86","sha256":"31058528ba6c4a2d73cf9e4173684132d7075c78ebe68d945c62b2e42588c7bd","sha512":"9c9b656e17ff37749d229397e4f0a8704d42de73866e552f2b118ad161de30a0974eb28780789e3b0b684287f367f2e7aeb5cc72eef8271f5248536712da8fc4","ssdeep":"12288:4qOXymypp2bxY5gFxnrF2woDNElf9+cIA/yr3VMq:4qgpypQxbFt5foDePIhN","tlshash":"70941230d062173b1b03a8dc741a3b8e3d92561fd854caa5fffc51a667cfd88864a99c","dom_hash":"domhashc4cdd485a47c1706e030e6d6ac6807e4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"play-sweet-bonanza-drk.website","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"172.67.181.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-29T13:38:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"play-sweet-bonanza-drk.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":1,"received_data":42631,"sent_data":565,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":32389,"sent_data":685,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"play-sweet-bonanza-drk.website","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-23","domain_rank":0,"first_seen":"2026-02-22T12:09:43.514922Z","last_seen":"2026-02-22T12:09:43.514922Z","alert_count":21,"request_count":3,"received_data":446673,"sent_data":1853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Tiny Slider:2.9.2","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"play-lh.googleusercontent.com","ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":3758,"first_seen":"2019-09-30T06:57:53Z","last_seen":"2026-02-18T19:25:31.683101Z","alert_count":0,"request_count":18,"received_data":1615050,"sent_data":9290,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-15T22:26:45.957139Z","alert_count":0,"request_count":2,"received_data":35935,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"necolas.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":1371769,"first_seen":"2013-04-11T09:42:29Z","last_seen":"2026-02-17T11:11:37.199007Z","alert_count":0,"request_count":1,"received_data":6826,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"play-sweet-bonanza-drk.website/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-15T09:15:20.307904Z","times_seen":396543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ed83b7fbb9a4a039267b521b742bb11","sha1":"6dea35181356547514ca65e3f779b5a8a54ab846","sha256":"080a485f94dee0e757572d6258ffb9faa1bf8876bef1aa5f60e15a81d54c4709","sha512":"f148dee75e4edaca76f0eb1d742b935ea57f5dcf5f80d66f4a709e7d4e017f10f4e9bd6703bcf4953e0ead74f9d08d282ea0a2e209b2c5fa8fd198d16cd5ab9a","ssdeep":"768:RMrxaUNtP6igcopb8aOvnwFoeR6LgQ21r+Jv:2rxrNFccodnWOpR6Lt21r+Jv","tlshash":"55e219c93114357342d721fa12af820ab3376469ee039a84d039fcd83dbd5a951afd6e","size":31738,"data":"","first_seen":"2023-03-07T01:35:21Z","last_seen":"2026-07-14T16:23:52.988294Z","times_seen":3024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Reddit+Sans:ital,wght@0,200..900;1,200..900\u0026family=Roboto\u0026family=Varela\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:15.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Reddit+Sans:ital,wght@0,200..900;1,200..900\u0026family=Roboto\u0026family=Varela\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Feb 2026 13:38:16 GMT\r\ndate: Sun, 22 Feb 2026 13:38:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31703,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ea1b524b82d5376624c4fbd32da164ba","sha1":"59ac66aabcd76c69dac541c305a1f1d475ad0b08","sha256":"16084da5ba6051b71319a046959c0f31a4926bbe119ea2c77a7f5372a1ebcb64","sha512":"7ba0279a40507bccaa2bbcfc0ca4364fbaeabbcbcba7f349abb2df9d50e855030a9d3a0b2f21a072982ac0d430cd2dabc9a91b1490bc37aadf62549e7304ba94","ssdeep":"384:w3w3s3VR9xqWSUq+DnLami0A0BNBOi/mksBiMfX5sMHi3XhKqY4XY5C:EEA3mkkxFHi3XheEY5C","tlshash":"2de2cc92083b9514ab871cc123cf7e36ee0ea254b850d578abfd1cd8ad9bc66437172d","first_seen":"2026-02-22T12:09:47.673164Z","last_seen":"2026-07-14T04:36:48.843694Z","times_seen":20,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":161,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-sweet-bonanza-drk.website/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:15.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-sweet-bonanza-drk.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 12:13:26 GMT","end":"Thu, 21 May 2026 13:11:07 GMT"},"fingerprint":{"sha1":"80:A8:27:E5:99:C3:CB:DA:DB:0D:CE:77:1F:65:3C:B7:B1:1A:96:84","sha256":"6D:07:D3:F3:2D:97:BB:D1:FB:9D:24:1A:51:DA:0D:B9:50:5D:C3:4C:D6:1D:62:52:21:EE:0E:45:29:A5:22:73"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: play-sweet-bonanza-drk.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nCookie: user_id=e4fa7a78-7a5c-4f69-a8af-ae196c608115; cf-ew-wai=e4fa7a78-7a5c-4f69-a8af-ae196c608115; pwa_id=6a6bdf3a-bcac-4e39-8e65-35d5396ff4e4; va_app_id=2bad782a-245d-4de2-b3bd-f3fce3b05d7b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Feb 2026 13:38:15 GMT\r\ncontent-type: application/javascript\r\nexpires: Sun, 22 Feb 2026 14:26:15 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIeyie4LOF5OKi2%2F4bGOa%2BTeq0bx4zSbXOvSvieLWfm0uxMFBDFhjnOmTBnjrWh6VYVI7%2FYECi1IT9%2BM%2FKlOGHlwGcD6FPU1D9WJYs0ILa6Fyy1spT85fy%2BRTmQFbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d1ee20109ba5621-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-15T09:15:20.307904Z","times_seen":396543,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"play-sweet-bonanza-drk.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/KCMTYuiTrKom4Vyf0G4foetVOwhKWzNbHWumV73IXexAIy5TTgZipL52WTt8ICL-oIo","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /KCMTYuiTrKom4Vyf0G4foetVOwhKWzNbHWumV73IXexAIy5TTgZipL52WTt8ICL-oIo HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 4312\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 13:00:42 GMT\r\nexpires: Mon, 23 Feb 2026 13:00:42 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 2254\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3a358df023050199d97d4ee04ca27f00","sha1":"bc62692b7d21b81c29946bfe111a2de2a5bc064e","sha256":"732a151d7754325188bcd70b56475b6c88deccf2fd40c5d4982f00081539ad0c","sha512":"b90454ea8d4df32f70213756b8326c593ed2935638fb19e9bfed72fa8391f8a1d0bee095bc8f9dec94639573060353bc20bc2a43297b9895ffed2d65bfe2f27b","ssdeep":"96:UW66h9rUuz6aYkuefsZUe01ufHvgv8SFcHOK:UW6+9rXO0uKsV0cvgv8SS3","tlshash":"b89107a0b60d0a50ab3c0a64cac3568275a4ace7f32bd635308e485d58c5e2f3b677e0","first_seen":"2023-10-02T11:05:04Z","last_seen":"2026-07-14T04:36:48.851576Z","times_seen":15,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":199,"dns":18,"connect":8,"send":0,"wait":41,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/IXouBj1Fn_LsKoHwsNMMQ6n2NZVcHENupTQpRI-CTpoR97cKH8EB0ZsTgTMMPF8eT_DR","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /IXouBj1Fn_LsKoHwsNMMQ6n2NZVcHENupTQpRI-CTpoR97cKH8EB0ZsTgTMMPF8eT_DR HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 154295\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"2a4e78e9cafa9773b6310276310d14a4","sha1":"0ca97d9820b431508d2b99171537a86430a8c125","sha256":"d894bf299025b3f365854221cf87897debc8bebf188c26b3a8fe7f690f6c8497","sha512":"3cca3c8bc5c65fe8c1cff7d5263eb972722ed07ed927d91662df7f3e9c67a4e3985a1d4e1839758bb8e44544d02edeed45d6ef3a79bc6da7b863797d27742264","ssdeep":"3072:KR5va16vm5s+4z6GfS2mhQ6AMFS0TL7Ko7pRaWadW:KXe++A6Qm6vcV7tp1yW","tlshash":"f6e312b6f9d9ae9bb258f02f7658bde58fc2c09358b7ca1d5c044ce84144c4c796ba13","first_seen":"2026-02-22T12:09:47.653245Z","last_seen":"2026-02-22T14:12:22.339247Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":141,"dns":18,"connect":8,"send":0,"wait":11,"receive":34,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/iseKLJhToKBMG9TnVQDBJETo8kVt278klOM7tk0Tb53QNnFt9VaicGME7ZynZCZ6Nqs","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /iseKLJhToKBMG9TnVQDBJETo8kVt278klOM7tk0Tb53QNnFt9VaicGME7ZynZCZ6Nqs HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 77199\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"2d3e6eb7f0844b0a093f235072365a72","sha1":"e818ce0095f86737a855778b8b2421730f1f28fa","sha256":"d4103e16bca8e33e9a6596959434c8715e443c8c7e1cdb1683f7b98588b0bb70","sha512":"a1c45e71a841f2eb10bbbbe26cdd6c369f8d01902488f8e47d206ea69ec42d65ba4a56a01596b49f3cd4d1f90fe804f830855c89ab599fc42eedc6e42def5461","ssdeep":"1536:kYVKcSBkNOZR9ub/7FuU+HR/v+QDozqQGWSpm9BrtRZDNq7mfG:2cS+NqnufFuU+Htx00pmXrvImfG","tlshash":"7b7302faea07c8812eaa7760c76c599fcc213932e50924e56ad935e0c326d45c06bdda","first_seen":"2026-02-22T12:09:47.661614Z","last_seen":"2026-02-22T14:12:22.339732Z","times_seen":3,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":212,"dns":17,"connect":7,"send":0,"wait":27,"receive":2,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/4zB1zjut2e8UQ-axD_cRTC1lxeC4pivyzN3btrvrv9D8ebRcnnCOCFUSWtzoqrEVz42D","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /4zB1zjut2e8UQ-axD_cRTC1lxeC4pivyzN3btrvrv9D8ebRcnnCOCFUSWtzoqrEVz42D HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 141812\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":141812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"2c3136c36434b244a35221df181b1a19","sha1":"c4a62c0c1becc15ed066523992f4ab65981fe1f2","sha256":"8f5bf65472634ba2be1fe41d8b006a5a1cccae46f4d36ba3848f83402deff9e2","sha512":"b297170a7db194cee87d0f4f59f763c0b1929dc97b3ce9c42b46a3819a09b782faf3ac7220abb72867a3b3037588a7440f514332deb7e46778f6e0b67d994dd8","ssdeep":"3072:U27BMrtiNKfdPxFvV3E8eMxOkGlMcw1pMedUbQLTB2HKhmZ2S57CeJzAjW:zKIatxFN3sa/aMdMiUCTBCKhZA7lzAjW","tlshash":"09d312f8709526350b5b7d8c4bbf1fe05ef3208449396112ae666ae710ed1bb68933cd","first_seen":"2026-02-22T12:09:47.675027Z","last_seen":"2026-02-22T14:12:22.348888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":278,"dns":17,"connect":8,"send":0,"wait":10,"receive":14,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjWK2ikXaOwc1rhB4zcfpXC8QNGTGrA7kgfcHrwF913FlY87q30","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjWK2ikXaOwc1rhB4zcfpXC8QNGTGrA7kgfcHrwF913FlY87q30 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 67407\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v17\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"944558459df74fbaad3795c9fbdb0142","sha1":"6cbd22bd0cf737a056c1e782fa811035687ba2ea","sha256":"8cd09db5b2655e045f16f96c01905e9f35021732a584c268762acb95eae85b19","sha512":"307316b263f6a6928bc1ffd019597f39aafef0cd65b5805967fe05bd9d1da5b24260ad93be243e884a2489caff33fae15c1b91f0b79e1fd703dad631ce37a504","ssdeep":"1536:DVAiDRxuSi8VroAKJU/usCxK53hV1HjwsnCq:WiDLji8FoFQutsR","tlshash":"2b6302052c597c021738a989e1ef47be2326f09e9f803e17364f051939812f5af7523b","first_seen":"2026-02-22T12:09:47.640915Z","last_seen":"2026-02-22T14:12:22.342704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":34,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a/ACg8ocKawkqUFXLmc7H6aY5-dYpsfckHn9L4lPA2XQmQFRxRCTgnQw=mo","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a/ACg8ocKawkqUFXLmc7H6aY5-dYpsfckHn9L4lPA2XQmQFRxRCTgnQw=mo HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 6971\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v0\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"c2ec3de52e36bc73529c7b9024d6a03a","sha1":"0c53d86265f7db32a00317b6a9b92492b0c0e838","sha256":"7db10489cd84679c0945e6b733b1092fe15509ceb3acf2adfcca7ec99052cb98","sha512":"992a26eadc4c2951f56f9fa3a7f0452c7c2bd127e0e5e1ab21d65e4306fd84fb314913d1bd86702cac51bcad2d2a7545e78cc4831c3d293ff861ac524926def1","ssdeep":"96:5xj2gRUrEX46McIUo6bQWMkl81SAzugfpa9zmavl75koPJpGCREAvErfs8/SKL/s:hU0pa6bQWbdNgfpa9zaKJpGiEqw11o","tlshash":"3ae11592c882cee045da86dc32b052ad7c707c82e7c6e14b31637374686930ff69a30b","first_seen":"2026-02-22T12:09:47.663886Z","last_seen":"2026-07-10T19:23:35.912198Z","times_seen":8,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:15.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/tiny-slider/2.9.2/min/tiny-slider.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:38:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11404\r\ncf-ray: 9d1ee2015afb2d96-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ffd-7bfa\"\r\nlast-modified: Mon, 04 May 2020 16:17:01 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 212522\r\nexpires: Fri, 12 Feb 2027 13:38:15 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N3GjJrBvkz0oaaDC%2BLzVPnuPHdJw0rshnOHIGLKoEOLjDxihJRqWvtSD0pSvPkSDbwrQ9PiNBJjButvQnl9UnXXC%2FbpIkrh0LdIYzSX%2BK38v0VAtxVMppWFgGn0kYD5hiC5L%2F%2BPM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31738,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31683)","md5":"3ed83b7fbb9a4a039267b521b742bb11","sha1":"6dea35181356547514ca65e3f779b5a8a54ab846","sha256":"080a485f94dee0e757572d6258ffb9faa1bf8876bef1aa5f60e15a81d54c4709","sha512":"f148dee75e4edaca76f0eb1d742b935ea57f5dcf5f80d66f4a709e7d4e017f10f4e9bd6703bcf4953e0ead74f9d08d282ea0a2e209b2c5fa8fd198d16cd5ab9a","ssdeep":"768:RMrxaUNtP6igcopb8aOvnwFoeR6LgQ21r+Jv:2rxrNFccodnWOpR6Lt21r+Jv","tlshash":"55e219c93114357342d721fa12af820ab3376469ee039a84d039fcd83dbd5a951afd6e","first_seen":"2023-03-07T01:35:21Z","last_seen":"2026-07-14T16:23:52.988294Z","times_seen":3024,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":33,"dns":3,"connect":1,"send":0,"wait":16,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/GENrucasY9f8F1sZ1u1VsFBHOiv59FJqAXKSMQH5GzhoCKutq5veplkCkI3_T7KDpg","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /GENrucasY9f8F1sZ1u1VsFBHOiv59FJqAXKSMQH5GzhoCKutq5veplkCkI3_T7KDpg HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 106766\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"cb08846ec7e8eb13bd5a38e250218d60","sha1":"36ab42e92d63fa64d04a53d0987b1608c496ff08","sha256":"35cc25827552480e02edb707906d8217540add8a20291782f1290e53071faa2e","sha512":"2452e240940ef069cc0ca71796c33c232e9ec89652a405cc04aa40565b756c9dab25d5ec28962160c34184edb8601228ce00e8373dccfa823e0a4d45ceb11875","ssdeep":"3072:Kddv27AI7+pUCX4S9ZOSNQSYXAcpIrONn3fgSYd/:2vaD4ZObSYxyrON8/","tlshash":"e6a312dd883cd976a5f3eafad4fc8f2f01e930e86d3128b4750210c9125b6a3565d1ab","first_seen":"2026-02-22T12:09:47.655414Z","last_seen":"2026-02-22T14:12:22.349389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":142,"dns":16,"connect":14,"send":0,"wait":56,"receive":19,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjXm8GfKBhJU4E3naoMxXo8T2Nolh49aKqtAx2xSuuqKkpAVnAjM","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjXm8GfKBhJU4E3naoMxXo8T2Nolh49aKqtAx2xSuuqKkpAVnAjM HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 78561\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"vd52\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"423c78069356d5e48d9ce5a522eb62e4","sha1":"b83c675f0956961c99ca5a7f09ab76275db72704","sha256":"e5e6867c7e7aefbe6f0f0a78af4d307286a50ab9092488bfbd002716a5bee288","sha512":"fd2dcdb92c3fd738edfd5ae630ff7fa6fceebd1a3492bc6d3aaafd9937894e5e1daa06458d16de342cf0fcb801584d172dd0d90552aebe5f7f0f859f5f4c06f8","ssdeep":"1536:P0ZdWRoa6V3X0pO67JLYt75KRaE3lsIF07upU3KYS3vQj11mjUBaXwccI33Q6r+5:P0ZYRob1X0p2PKRl1oqp6lSAJBzcF3Q/","tlshash":"b57302d79183e87283f24ad9e64d66ce3da8395f8a1a08f86740192c147e34f94dd3e7","first_seen":"2026-02-22T12:09:47.646714Z","last_seen":"2026-02-22T14:12:22.346274Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":32,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjUOyC-El_yoPBRXE82CSYTFnT39R2tHlO4eS2cHHsz93nC2l9A","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjUOyC-El_yoPBRXE82CSYTFnT39R2tHlO4eS2cHHsz93nC2l9A HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 279787\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v2\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 511 x 512, 8-bit/color RGB, non-interlaced","md5":"37d9f7be9a12ea693e9c4dd5e3241093","sha1":"78acc4ace91e87b615995bbee9e6d28b42f378a4","sha256":"3cc4483f0704e358cabf795ba3a782dba429ffca2384b6bff9f742c858d6ad98","sha512":"8bd24a90efee10120df9903bb361ce6442d0f0d1fd7cd9af6c01e947f905d61f891fef61539ae7bfc1318f75d54f3d0ad103ae7c6f504b4f4d3f7b66de336aef","ssdeep":"6144:tBrWBYticOEsP/zxPXu9bYwjoxWcN91034l4V:txAJxP+9zUxrN/03Y4V","tlshash":"575423bfd3f904e7530a7ba61e89118590d1631137fa813d0e9951ceb5e93272c173ab","first_seen":"2026-02-22T12:09:47.669835Z","last_seen":"2026-02-22T14:12:22.346829Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":52,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjXxZ0_D4-GN1iN656nlqVGH2HZSV8405NOAa8aGOiXDtdyhL08","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjXxZ0_D4-GN1iN656nlqVGH2HZSV8405NOAa8aGOiXDtdyhL08 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 54635\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v320\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54635,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"dc4469e2a42e6a70dd0307da26edd12f","sha1":"45d1506748b3709c7f2898807911c54d92aa0d28","sha256":"ee5c2a1c3113674c9af54821eb2ac2b67b899d8d10baf212e9688cdbe00c29d9","sha512":"477d287e381342e0b852fffa285b118ed35a1a0ce28230d5086ea688f9de1da1a701edd727d4059679b507e339d7767291226f30f156d2c27160ff8362d24ca6","ssdeep":"1536:kzYsgVDSud3TqAbcisLTG/uP85xSlqzjL:kz019ZTjNWTDQxSlA","tlshash":"2c330274fba3f6dfdb3265740e611b40e0ba387ee653a06653b6027a4491599afc7003","first_seen":"2026-02-22T12:09:47.632646Z","last_seen":"2026-02-22T14:12:22.341341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":56,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-sweet-bonanza-drk.website/favicon.ico","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-sweet-bonanza-drk.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 12:13:26 GMT","end":"Thu, 21 May 2026 13:11:07 GMT"},"fingerprint":{"sha1":"80:A8:27:E5:99:C3:CB:DA:DB:0D:CE:77:1F:65:3C:B7:B1:1A:96:84","sha256":"6D:07:D3:F3:2D:97:BB:D1:FB:9D:24:1A:51:DA:0D:B9:50:5D:C3:4C:D6:1D:62:52:21:EE:0E:45:29:A5:22:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: play-sweet-bonanza-drk.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nCookie: user_id=e4fa7a78-7a5c-4f69-a8af-ae196c608115; cf-ew-wai=e4fa7a78-7a5c-4f69-a8af-ae196c608115; pwa_id=6a6bdf3a-bcac-4e39-8e65-35d5396ff4e4; va_app_id=2bad782a-245d-4de2-b3bd-f3fce3b05d7b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 22 Feb 2026 13:38:16 GMT\r\ncontent-length: 23\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BQmzR7%2Bk%2FEXV2CkL%2F3O5Vniynp%2BfR7QBKa5l%2B2Y2rS2PLxIj5GomHeUGTHWktXjFLLWXAI1ByxMjchLFpdWGBkDWaXp3ORwimxDT%2FXnUsynDtIynEqbT53lqJARGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d1ee2036eb05621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T09:18:40.566653Z","times_seen":17261326,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"play-sweet-bonanza-drk.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"play-sweet-bonanza-drk.website/","fqdn":"play-sweet-bonanza-drk.website","domain":"play-sweet-bonanza-drk.website","tld":"website"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-22T13:38:15.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-sweet-bonanza-drk.website","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Feb 2026 12:13:26 GMT","end":"Thu, 21 May 2026 13:11:07 GMT"},"fingerprint":{"sha1":"80:A8:27:E5:99:C3:CB:DA:DB:0D:CE:77:1F:65:3C:B7:B1:1A:96:84","sha256":"6D:07:D3:F3:2D:97:BB:D1:FB:9D:24:1A:51:DA:0D:B9:50:5D:C3:4C:D6:1D:62:52:21:EE:0E:45:29:A5:22:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: play-sweet-bonanza-drk.website\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:38:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncf-signal-fnrrx: e4fa7a78-7a5c-4f69-a8af-ae196c608115\r\ncf-x-requguest-id: e4fa7a78-7a5c-4f69-a8af-ae196c608115\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vA%2Fg73drhdkCyWhZTK1Aoel1F4RHmaGr%2FHuMGqUCH6cx9%2FdPlV86qXt1ANFiHKIZzzWjZZ0ra3nTjwDq%2FUsEmEEncaHT0yA9XsF0xeU2lvH7z%2BY%2FuP07lo531enWzA%3D%3D\"}]}\r\nexpires: 0\r\nlast-modified: Wed, 18 Feb 2026 00:55:47 GMT\r\npragma: no-cache\r\nset-cookie: user_id=e4fa7a78-7a5c-4f69-a8af-ae196c608115; Path=/; Domain=play-sweet-bonanza-drk.website; Max-Age=31536000\ncf-ew-wai=e4fa7a78-7a5c-4f69-a8af-ae196c608115; Path=/; Domain=play-sweet-bonanza-drk.website; Max-Age=31536000\npwa_id=6a6bdf3a-bcac-4e39-8e65-35d5396ff4e4; Path=/; Domain=play-sweet-bonanza-drk.website; Max-Age=31536000\nva_app_id=2bad782a-245d-4de2-b3bd-f3fce3b05d7b; Path=/; Domain=play-sweet-bonanza-drk.website; Max-Age=31536000\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d1ee1ff7ec037c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Tiny Slider:2.9.2","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":442619,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"bacba56a9a9099ca72189ceb34cf6eff","sha1":"47b9b48a1bceca32d206927c332e5e54bd5cccef","sha256":"ddd96825022454ea6f7ec05a4560154a8d3ccdeb8e39f72404cab7f53a6ddadc","sha512":"be50f54b03f764128307411459399a536b0ee8ad0cd7a4fe4a28b67c5781f69a39d80205f05537a00145edbadce9a74af64e6f017a2b060f4849fe6e79ab0599","ssdeep":"12288:lqOXymypp2bxY5gFxnrF2woDNElf9+cIP/yr3c0v:lqgpypQxbFt5foDePICJ","tlshash":"1694123090621b3b1b4398dc741a3b8f3d92561fd854caa5fffc4196a7cfd88894a99c","first_seen":"2026-02-22T13:38:40.347716Z","last_seen":"2026-02-22T13:38:40.347716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":79,"dns":40,"connect":8,"send":0,"wait":51,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-22","alert":"Phishing Block","trigger":"play-sweet-bonanza-drk.website","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-22","alert":"Sinkholed","trigger":"play-sweet-bonanza-drk.website","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"necolas.github.io/normalize.css/8.0.1/normalize.css","fqdn":"necolas.github.io","domain":"necolas.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:15.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /normalize.css/8.0.1/normalize.css HTTP/1.1\r\nHost: necolas.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 05 Nov 2018 02:35:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5bdfac72-17fa\"\r\nexpires: Thu, 29 Jan 2026 02:41:48 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1404:1F0370:69155D:6A7FFE:697AC694\r\naccept-ranges: bytes\r\nage: 558\r\ndate: Sun, 22 Feb 2026 13:38:15 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1771767496.889126,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 36b9f90e229a09c713082f093273a75414ccc0c8\r\ncontent-length: 1738\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6138,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"112272e51c80ffe5bd01becd2ce7d656","sha1":"7ffde343bdf10add1f052f3c4308a15180eb4404","sha256":"580818700724d42d7fcc4979b0197971fca1c6d2e0286769237a0ac897df5512","sha512":"a070c473c5de7788625ba0b10fbaa36e723e074eef0dd5fb8443d3be7f694993b56dc46a1e9f268fda72afef11542d869ad11f236062f4a7bd02cb346acfb3a6","ssdeep":"96:FIrs38+a1Dy8lDOhEg3p27oS5tdnCC5wBGeJxmnJnWHO11:FL38UEg527ogCdBRKRWHK","tlshash":"c1c141a117206f2282a60d38776f978a73040127867c3cddb4a262e9cf45b5dd769bce","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-07-15T09:11:54.671438Z","times_seen":5054,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":46,"dns":1,"connect":16,"send":0,"wait":16,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/redditsans/v6/EYq3maFOxq1T_-ETdN7EKQNre5a933NEapo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/redditsans/v6/EYq3maFOxq1T_-ETdN7EKQNre5a933NEapo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://play-sweet-bonanza-drk.website\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:34:56 GMT\r\nexpires: Sat, 20 Feb 2027 02:34:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 212600\r\nlast-modified: Tue, 16 Sep 2025 03:40:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41796, version 1.0","md5":"0336d7e09076f0dc54f5a3856ddc90e0","sha1":"3af0ff609065543d74008776c681b5237ddbcfbb","sha256":"91aa89e14e6d6e709fb1fa3c87854bc65bcfe0b1f2e1754d113735e245e47b7b","sha512":"df86a9ba98dab3d6c3544982125cd8b5660cb44a396338e9fd23c7ef3d5619f470eb9751fbab5175c6447a52f19def506573dcc43f9f1ef0a4971d1ff120e655","ssdeep":"768:KtVe2KkkhvTRt53JpgyfVdMBynnJIPN6b6ha/XV99HWva8JkzZwASoVSZIn8:Aei8dt5bfVd0ynJsE/dH8a8J4KhIn8","tlshash":"4513f2f5b3678069a93f2c92c5c124710296f10f00bd39db50da3e45792906bbdbd26e","first_seen":"2025-09-23T07:08:17.656307Z","last_seen":"2026-07-14T16:33:27.061314Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":74,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjWg-H84-oTvGRH2P8kW9SSqR-hPJn75ACebT5TqA3ee-KrY8kF1","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjWg-H84-oTvGRH2P8kW9SSqR-hPJn75ACebT5TqA3ee-KrY8kF1 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 293105\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v3510\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":293105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 499 x 512, 8-bit/color RGB, non-interlaced","md5":"6077de9e9d01600e618e3467a7ce968a","sha1":"0108e364135197de3838338d97549a9af3bd8aac","sha256":"f10dd35a648e1b4d40d6c990aff8e073453f5548705c72322d39c4a549765041","sha512":"29dff4777f65f7ce7fd7984da5bc4f950c61c2c861c199dfad6634b4e8d7a2a788c55f2eca12d38676833e59971834297d02cbc9cdbf84266cf8ff5b0953e90d","ssdeep":"6144:5pQCU1vu3TMJfVYV6Fz/AvTxihKvhVo5H22d:5pQCEvwMJSVmixihBZ","tlshash":"635423c434765db4fdcb6b807c69bf35c960802e663e1c01892fa9d4afcc6b20e651b9","first_seen":"2026-02-22T12:09:47.676659Z","last_seen":"2026-02-22T14:12:22.349898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":30,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjVNxm2aCS8IQvD3Y5MIUVj6nOMev7vt88RCm01Qc871nFFEcSrx4g","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjVNxm2aCS8IQvD3Y5MIUVj6nOMev7vt88RCm01Qc871nFFEcSrx4g HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 2076\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"vc385\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 461 x 461, 8-bit/color RGB, non-interlaced","md5":"e3ccce998aca3a999520be6544cd0056","sha1":"eda194e80a532b46c4b3cf205d2ffbc9384661df","sha256":"95ff16d5cea679e9ce95180d12f8251e04371d99fcd6cb79ad26cb40db91bec8","sha512":"055d1e4fd0562d16fd7172d6bc524a20bcd2097d87011ce972ff268bede02e1ced3fadd83bb5c74cbe220f222e59316e857b6b456b54aba474d55d63e8e41e67","ssdeep":"","tlshash":"dd4109e37093443c4c780843ab278b8ffafd201e759b22da251466886fa903a4b4b15f","first_seen":"2026-02-22T12:09:47.657194Z","last_seen":"2026-02-22T14:12:22.350383Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a/ACg8ocLmU1ED2FsFW2FonHwyBtZj78_ZQq4li741FfZpCKcm9MzcTA=mo","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a/ACg8ocLmU1ED2FsFW2FonHwyBtZj78_ZQq4li741FfZpCKcm9MzcTA=mo HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 1999\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v0\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"ae4c957d32bcf136042e78b545cbb413","sha1":"957b46b9585bd07a9949bd1340966ccedbfa44ff","sha256":"618bf4dbdc10bc43701b92a04a1a4a3eb43aca9e90bbda204ffa5d84716747c0","sha512":"333d157fa4231360a7ea386b0cf919c9f5e90bc1be93932a8cb01c0cec24de743c771e25b1f49eeed906d506efc4ba98fa8a243c019bdbd268acd135e61831c8","ssdeep":"","tlshash":"d64168910113ba86b21d4deab2c824aa90f0f0d6c7fee5216200413bb02bf837eccb45","first_seen":"2026-02-22T12:09:47.665534Z","last_seen":"2026-02-22T14:12:22.34023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/tiny-slider/2.9.4/tiny-slider.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:15.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/tiny-slider/2.9.4/tiny-slider.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Feb 2026 13:38:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 573\r\ncf-ray: 9d1ee2013ad52d96-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61787428-23d\"\r\nlast-modified: Tue, 26 Oct 2021 21:33:28 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 297403\r\nexpires: Fri, 12 Feb 2027 13:38:15 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ldeotbagKWZnnD04g2PY08pGILBy6%2BhEX4AaNMqhMRF74AjUd4m48YC0qUegwjsiZT0i6K0Xol7s1KFgZOiqu8ThNt39frDIZCEdT%2F8m3HBRuyrC7n8hGlEmQtfyd55nx4zGOSKS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2178,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2121)","md5":"afcf365e904cab0605984cb0e73114aa","sha1":"d362d2d6f372813e6e66009f005b459e40bbab1d","sha256":"e9b8906a8b7540b8accfd2a491c0821d6bd6d8ccbd4ab53a56da8906ff028423","sha512":"78cc5d6927f95d6dd95b5c190ab588b4eda367b03d161b997e355dcedafb66c28d3a6b7a4d43134207e9368551c9f3c4e52f410b4038b2e5f3b064ab00e59ca1","ssdeep":"","tlshash":"4841a82983603648d5e3d7207af89a298539fd95fe334cde264dbf024742b5a1012ed8","first_seen":"2023-04-07T01:27:14Z","last_seen":"2026-07-15T09:04:07.80748Z","times_seen":3459,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":35,"dns":1,"connect":10,"send":0,"wait":18,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/ivAdduSvChUW721HVY-gCqkb8S2ydSUDmgnws-dIW1ZIFJAPJ2F4L3aaaQmq5aR8lAg","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /ivAdduSvChUW721HVY-gCqkb8S2ydSUDmgnws-dIW1ZIFJAPJ2F4L3aaaQmq5aR8lAg HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 170221\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:20 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:20 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5336\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"93f7ac7425c223c942cb0efd86c2faf4","sha1":"90c0b68d34e8c5d76d07b0ea963dcf9a923d6b75","sha256":"3f111150b879f491cafdd4bdce8605550be15926a9b721292a89e120a71ab355","sha512":"34acb778e3c8de50a983f645d98edc51463b873f0f08d980f6124e553b761610f825959c955a83571daa568c45e65914e572ecb2f76af76d3d8239134528cca3","ssdeep":"3072:nZq0HenzZmTPY6+poVtwgZoiZVm0CyHWwQHpM9BYssCsh+Rtxd/0M5Dxek53:nZqzczeimgvGdpMBYdQzHrV3","tlshash":"c3f32230083a6a5fabf70e84dd5fe45f7781a0e42f71a30b561bd49e3027ab264c6551","first_seen":"2026-02-22T12:09:47.659745Z","last_seen":"2026-02-22T14:12:22.348308Z","times_seen":3,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":461,"dns":17,"connect":8,"send":0,"wait":9,"receive":4,"ssl":450},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/vy8y1ia13Yju98KMiJo7OCzILKYA4nP7AZSsxdTlmuSSVBgYdW8haI_dU0RYlQ1jiB4","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /vy8y1ia13Yju98KMiJo7OCzILKYA4nP7AZSsxdTlmuSSVBgYdW8haI_dU0RYlQ1jiB4 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 65262\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 512, 8-bit/color RGB, non-interlaced","md5":"cab3d82cba458f0f263791e084c36007","sha1":"81680a9ed6ae5a0560ef799eabe1ec2c429c7f3a","sha256":"d50d953b8ccd1f2c00ba0adff0906c17b07b9c7076f1fa05afb8f79bc2fdba9f","sha512":"6b4f8b752bdacb479dd3ede772b8a2ab76473572aa649dba0cbdaad73c4249e5522fba57b923dc1244457d182f3e80f8c3e64e465c2e6ddd68bc7814ae413c12","ssdeep":"768:LS0jWgolVozoAe8oqpzmqdmyA2MMr40uBDzSYIBaHUgGnGi8madwQ0fUi20WpOCZ:20Clr8Poq8vjnma0Z8uQ5iYd3QG","tlshash":"955302738441c8f25a3f641c1bdea4649ae0f49f24d995215e636dd0b30fe388b44aeb","first_seen":"2026-02-22T12:09:47.637844Z","last_seen":"2026-02-22T14:12:22.345794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a-/ALV-UjU_jRPwxKyiyy__LM649ZuqD5JcAs_zZJbZ4lcEzc0KF2EKD2O0","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a-/ALV-UjU_jRPwxKyiyy__LM649ZuqD5JcAs_zZJbZ4lcEzc0KF2EKD2O0 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 90888\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v44c\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90888,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 512x512, components 3","md5":"83868956059e3bf55321c42efee1348c","sha1":"8cacebd2baa0f0e460f368a849fd9b6350855533","sha256":"c337a14374d46691235506479ba8e2501a3b13c01f3baa3654b7b8802524b2f8","sha512":"ab6b7fa63cd0d656e266db3ddddb1001cfa109e3235970b0de37b281e89725cb74c9e52e1d66e04951d4ed2acda34a1485719403878a17b44148b9d85976fc23","ssdeep":"1536:bkuqDgBkCSBDM1YryXeEngJbLhWtMiVxp+ahC6PB5RD4epo+WZsOZD6fEmvJ2:PKNC0yOLpcxp+cLPB5RD4eSZBZD6fE82","tlshash":"c2930232b84a6f80c713657c4a4e1d61726dfe3ceb7dc9952d0590ae6c3a9027e87f41","first_seen":"2026-02-22T12:09:47.629077Z","last_seen":"2026-02-22T14:12:22.343224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":51,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a/ACg8ocLDPbP1AcKtwq2YgOhAL6KhFMQc-DtsSGoQcucKw4BkkgFNbw=mo","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a/ACg8ocLDPbP1AcKtwq2YgOhAL6KhFMQc-DtsSGoQcucKw4BkkgFNbw=mo HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 5339\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v0\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"9bb63234714ff5fbd115eca73e2b92e1","sha1":"8859fcaade58ba4189fde707e7d4c4ac7c5c2572","sha256":"095f01e90f20a10e677244b12e28ea01fabed45a406c30132c0691e47465d045","sha512":"13155862bcec95434772a6d0a4238f7e651ed31b5e0ad39226b01a155fb8e9a61afe69b6d301d78ff70233f03b6d2b07b672deb91ed73f8c7f757780b9d3670b","ssdeep":"96:M0Rmjt30haH7GBbPsXy6azV+NMniGDyiB8DZmIjNa2gc5L+:NIZ0QH7JBa7Dy/DVjNaiL+","tlshash":"0bb16ce23a13f2731e3a65fa65404ef0748f8577686db396009c6b2fd316c4316803e6","first_seen":"2025-07-05T12:33:06.139417Z","last_seen":"2026-04-05T07:48:06.535418Z","times_seen":11,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/a/ACg8ocKocT2RKJTqKAgm5tCIugFYscdToRTWLYe_BDgx7x69oVi6NA=mo","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.211.22","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-sweet-bonanza-drk.website/","date":"2026-02-22T13:38:16.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /a/ACg8ocKocT2RKJTqKAgm5tCIugFYscdToRTWLYe_BDgx7x69oVi6NA=mo HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://play-sweet-bonanza-drk.website/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 4840\r\nx-xss-protection: 0\r\ndate: Sun, 22 Feb 2026 12:09:19 GMT\r\nexpires: Mon, 23 Feb 2026 12:09:19 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5337\r\netag: \"v0\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"bddddf85e229718c2c0c46768febb990","sha1":"e901129a1547f3301e939d27746c71e3c754e655","sha256":"b19e62a073fd761e1adabf374582f728a039549448642a0cdba62456f912cb5b","sha512":"8e1deba8cad0654494e6f423bf0c5a2561becd3014b7118fc302c8e85735e22b17b1ccca2eb894077081ac06046d367d8df29e901e6fe06eb4d3fd2966004ac6","ssdeep":"96:I9zCRIgnm9J2MKz3WRXPSXrrIAiyX49ramhN:I9zeIgIDKz3IkwXh","tlshash":"c2a126d7a33670b35c341deb2c5c49a5a23b2522de74a7a069095bfb8f90952f0c1397","first_seen":"2025-08-04T03:54:45.851488Z","last_seen":"2026-02-22T14:12:22.350853Z","times_seen":4,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}