{"report_id":"5b0ddc4b-0b79-418e-aee4-bdba53012a99","version":6,"status":"done","tags":[],"date":"2025-12-22T09:36:31Z","url":{"schema":"http","addr":"oxybet88.com","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"ip":{"addr":"172.67.151.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oxybet88.com/","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"title":"Oxybet88 : turbospin Unlocks Sapphire Oxybet 88","dom":{"size":54038,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11458)","md5":"3664303f0df0e5ae2ac00ab9e129dd38","sha1":"0e19a5bef4fe4ef9ffabd9e70c9aa61a6015ba73","sha256":"1b5b021ef3833930fdd116be0ddb7a697c4c3ca13928dfe37aebe33314cc438b","sha512":"605f05fc6dc5f0aaa3aac5fd3938946018dc10656b08c1fb3b6e365795a4298eae69699af8cc841d8e8a3baddc7b0765daf836d8edd71212f8dd540b6542b1e1","ssdeep":"1536:HZ5F4g5A4WR2vMVRoywLJIwPBqwOkItdY1lEcnvr:rJIwPBqXk","tlshash":"5a339523b0d4105d522bc31598c1fb7e6f39c94386621dadb95d7b9ccbcab826a3324d","dom_hash":"domhash6a1b142d36a32ab549a0a755167157d9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oxybet88.com","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"ip":{"addr":"172.67.151.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T09:36:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"oxybet88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"for.ashleyndesigns.com","ip":{"addr":"104.21.32.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-26","domain_rank":0,"first_seen":"2025-05-05T11:28:00.119676Z","last_seen":"2025-11-12T01:42:06.099202Z","alert_count":0,"request_count":4,"received_data":672526,"sent_data":1797,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-22T04:06:06.472882Z","alert_count":0,"request_count":10,"received_data":537947,"sent_data":4367,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-12-21T23:41:28.705339Z","alert_count":0,"request_count":3,"received_data":144974,"sent_data":1516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oxybet88.com","ip":{"addr":"172.67.151.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":89436,"sent_data":1430,"comment":"","tags":null,"fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":1,"received_data":21447,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":6432,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71618d10f7356c378595c41246fb6543","sha1":"6b75cf807b5be56d947c4599bd1d1c2735a10960","sha256":"88b28d083673fc44c0dccfa7282b2e3fd27d2b229eb65e9196329c16038337b0","sha512":"7f7678570ca06cf608fcc7c5aec6ce5698d7b9bf8d990a56cb28a0f38d11bddb0d745638f8484306d7ebf5079dc802df37d830c1269fb3feef4828124798524e","ssdeep":"96:4V9HqqXQL8e05UjvNvECpPlVyiJl4wxQYqvjVYeUEyEJXHOCXOV7:KHZQ4hGvNcCpLr/xQnxN3oV7","tlshash":"c3d1a6ecb292f0729b9774e5802f000bf93da539908bc450d614e8e569bd99e4173f3c","size":6167,"data":"","first_seen":"2025-10-21T18:06:54.960525Z","last_seen":"2026-01-06T10:11:03.411712Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a0f3d77ab61466c52472cdafa2b5c4","sha1":"28283a80678fe0de5ee42353e362f5dc15265f85","sha256":"8ff11c4e92efd206bc49edebfbcb03aae6e3a13fbc7735302f28558a1756078b","sha512":"b357906a82fb997c00aeb1e90b0ecc0bb155b797c12549687e18757bc9d117474a765a0bfc77ee3c04772a88ab08d84b9f0f605e3da458745e698cb95ce13ba2","ssdeep":"768:wOCpyTqXz0meAZVUcDI3lwZ6HeJkjV9Mo25Totc:wYTqXz0mecVUcDIVX+J4Mkc","tlshash":"7f33b49df292b076479364b5813f600ae33f3956640f8524e06ae9c2bcbdd59a136f3c","size":51565,"data":"","first_seen":"2025-10-23T23:05:27.328069Z","last_seen":"2026-01-06T04:39:27.161306Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-selector-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46ef97a117b2fc2e78e4c701da40de5a","sha1":"58a633258acec0247e4417091d72197cf22bfe87","sha256":"4e136d67f20e2a33a4aa182cbf5e178768d5aafc6b75da16aca7ae975c8aeece","sha512":"b848d1e89e84e3a8fec78bc87f34965e9f10580e0a564bd0106d1ff7697cd2036c73025992447acfcdd4fc785cf13df11b2f7a50db56370bd0c5787ec8866304","ssdeep":"192:oHfKZ9ujnS/IgKAd4QrJm1PIJdHGa6IwgE6NsbwvuH3dn:06GSdYAYmAIwoPuXR","tlshash":"3922947e7156b1354edbb0b6841f148af636a579608f8068f214e8d73c3c88a9573f3a","size":10136,"data":"","first_seen":"2025-10-24T06:58:03.697596Z","last_seen":"2026-01-05T14:42:07.132769Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a415e5ee42491e232157db45c9e3d8d","sha1":"a8df74da9a81d02fec1fcaefd070e14926c12a91","sha256":"26834f5d8ef7ccfd67a09301a8d2efe391209197f6d8ac2d6fa087ce328bd779","sha512":"2fa66b057a0a2df89b6c1efddff89f4d983ce7f9ba54f40b704c000b8cfdf5e8a3971b07d1d1f0e14cd5cedf6406d89c7a9e9d48cdcab77121b1c3d2ec04c1dd","ssdeep":"384:4CXUpS23X0Y5kK64yAZkBbUbR+xDVgJAxTFRAGPBLcnaJRySLybHzr1415:4CXUVX6XPmG2ncxLybHzr1415","tlshash":"14c294ddf282b46942a3e0b5902f560ba23f6114644e801cf5ade8e66db8d5e3137f7c","size":26664,"data":"","first_seen":"2025-10-21T17:45:48.733601Z","last_seen":"2026-01-06T07:16:46.551181Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c76a77d3b71efb0d41cdf06424ba00f1","sha1":"b2abd342fa0c01d1614462577fd975b21953cd33","sha256":"2436d5f1fa1abcddd45d6a4f48f44ec4bf67dbd3cbf7113c7531e7e27b13eb46","sha512":"9c248240e9b65084f1bd30296cdd4bef220b98f884bc1051d156eb31e113e56ad489e9f5fff81946b4540c316b1d4682cf831793e9d27c37702b82583740f8d7","ssdeep":"768:4uCdWBuHV4qVy2STUktuIZfYpAOq3Qhgd7o+0:42unY3HtusfX3c1","tlshash":"4203d9d8b282b0754693a574406f110ee23e6919640b952cb0abdfdafdbc95e2137f3c","size":38737,"data":"","first_seen":"2025-10-21T18:11:09.659629Z","last_seen":"2026-01-06T12:56:28.820517Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","size":7812,"data":"","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5eba6a1c557b5e3adccbcb29b7e062","sha1":"5c40ee3d36d34746e2a0f32bbe16de79ebd0f1e4","sha256":"5e0dbfd6866515c7faa98c9c4b47391a3b3ce320296057a237b8f902846eef90","sha512":"7c466f66d1f55e52016b87c358fe9f76a4843fb428cb1cf7cb35d526ab1d57e38928aadb29cf6df308d966ce5033a95f8b61e6098f28145d9c6241156c091f35","ssdeep":"384:AnXCVRcBmEljZ1u6YwAZkBbUfRwnowxwwYpD6RY59LMJEJ5MkFo5fgSk7:AXC0ljnhMD6RYzLoEDMlXk7","tlshash":"91e2d89cf292b0754697a1b4806f450ea23a7655240b802cf1aeecd6ad7cd8e7137f7c","size":31525,"data":"","first_seen":"2025-10-21T17:45:48.732204Z","last_seen":"2026-01-06T12:56:28.817Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","size":284545,"data":"","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","size":12729,"data":"","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"for.ashleyndesigns.com/img/asia/home.gif","fqdn":"for.ashleyndesigns.com","domain":"ashleyndesigns.com","tld":"com"},"ip":{"addr":"104.21.32.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ashleyndesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:21:47 GMT","end":"Sun, 15 Feb 2026 12:20:19 GMT"},"fingerprint":{"sha1":"85:14:CE:E6:5D:65:43:E1:55:B0:03:4D:17:66:5D:D2:FF:1E:A5:8E","sha256":"2B:EC:C1:F6:5B:D6:F2:B4:B3:69:43:11:2D:45:16:67:3C:BD:1D:53:A3:1E:B6:F0:59:A7:CC:25:70:CF:85:28"}}},"request":{"raw":"GET /img/asia/home.gif HTTP/1.1\r\nHost: for.ashleyndesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\ncontent-type: image/gif\r\ncontent-length: 83440\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Apr 2025 03:36:50 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TepKGnc6hnLZXUGdpQMyuoillQ2%2FE6ovoGe0FViaANWOCVL49PWObcS7xfK%2FGIrn%2ByLyBB5sXISFBZdOB%2FKt7h0S%2Flb%2B%2B7OuctN58KMC4Zo6kOr0\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 9b1ea2172e6d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83440,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 50 x 50","md5":"bee726c0c57df145b7b50228b4208255","sha1":"845ddd47708d60f8a4c3fd9ae092a340b330bb48","sha256":"fc4f188470566bfd4aaf66670df62926e8ce34b9dc1526fa0b8f47d9ac1526eb","sha512":"780a907f95f549fccab8c7b33c9240544aaa939cf052fadd9af57b734299e04206d14a5fa2c3613f770bfa71cf0c9c8f910b3644de95d1b38e6d899080b36d92","ssdeep":"1536:QYvaB47nsv6MfuXx1e9VDszvaB47nsv6MfuXx1e9VDsF:VacnmusVkacnmusVy","tlshash":"8283af3d80092a01f16d447502f89b2f9a3ddfb479d89afb682995843ff62dc618d2c7","first_seen":"2025-05-05T11:28:08.53133Z","last_seen":"2026-02-01T03:51:37.122608Z","times_seen":12,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":371,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"for.ashleyndesigns.com/img/asia/newww.gif","fqdn":"for.ashleyndesigns.com","domain":"ashleyndesigns.com","tld":"com"},"ip":{"addr":"104.21.32.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ashleyndesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:21:47 GMT","end":"Sun, 15 Feb 2026 12:20:19 GMT"},"fingerprint":{"sha1":"85:14:CE:E6:5D:65:43:E1:55:B0:03:4D:17:66:5D:D2:FF:1E:A5:8E","sha256":"2B:EC:C1:F6:5B:D6:F2:B4:B3:69:43:11:2D:45:16:67:3C:BD:1D:53:A3:1E:B6:F0:59:A7:CC:25:70:CF:85:28"}}},"request":{"raw":"GET /img/asia/newww.gif HTTP/1.1\r\nHost: for.ashleyndesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\ncontent-type: image/gif\r\ncontent-length: 147281\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Sep 2025 06:07:28 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2HaPY2Fvwad1A%2B84%2B5L6zJkB%2BdaHVSZBtdoNah6gTrHVOPBYQUi7piuHBew8ZDWN3Q0DFY1HoBUe2tqiaUlYe5cnFh64RVi7PzYKY4cPvfiNKM1\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 9b1ea2172e765693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147281,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 50 x 50","md5":"a2afba7104badb5e88cfdfa0edfaf785","sha1":"995a95c0630286b1296f656cdde4e66b99b78ba3","sha256":"23278a9a2350207e2ca26122ee911ffc86ed27c26b47943b992476ff66870fe0","sha512":"9ec69e94e2512b7f108b806a4b6ef3f860f6c1f589183442c9672eed3db9cca4bfd11c876f807522b61e8badb1d202da90f2c9299a46ef087d114cc021107703","ssdeep":"1536:5fOAAe2AZmjGL2KPuyQA2mgoUUshNqiXssiAG4KQofUFgbjm934AxDzzaIxINEFc:5ee2AZmDzmgoUUTb4KQofJCDzzaItm","tlshash":"83e3d04e8415397cf4789eb004da6b4f633cc37428a1622da9c4a9c17f1b9fdea9c6c5","first_seen":"2025-12-22T09:36:37.56997Z","last_seen":"2026-01-17T08:38:12.882543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":347,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2976\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:57:48 GMT\r\nexpires: Sun, 20 Dec 2026 10:57:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 167902\r\netag: \"9215b9e0dcad338a\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7812,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7690)","md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":21,"dns":1,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.1/webfonts/fa-regular-400.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.8.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13552\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQMvhq4BXONLM89R9yjMBxGINfiezUqS9%2BeQuCugh0wmMLz3YHO9fQINYE0hfQOsKxiCjfuQNApwztDH4uJU%2F7s18ekmCIeXWA0p897RbF6V\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"e6257a726a0cf6ec8c6fec22821c055f\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:57 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b1ea2210f8f0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13552, version 329.-17761","md5":"e6257a726a0cf6ec8c6fec22821c055f","sha1":"8583a4f0dd12e15a48b3395593307a84d971cc33","sha256":"ccf4db1eeb68c96e05e74f8ebfa75cc60c3a0fed862dae6b0ad85d4e1b5b4e4f","sha512":"4d9277a7a2a2eeea8f98ae9918019c59f0578e4021a16261515af7c27d65404b891b9c995888327f01a58615f5fb6423de7804127817d30bff7f3b4b16ce2786","ssdeep":"384:C43qtcFX1jCGXIYkTvmkrrAeOWZJc12aYX:CdtYXgGQrFOWDk2a+","tlshash":"4d52d10cf190e4b1c3b7a525c5b3f4eab8643e11c18377d374834d288557d1d3a84a57","first_seen":"2023-04-05T23:05:54Z","last_seen":"2026-04-05T14:13:40.111114Z","times_seen":1555,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":47,"dns":0,"connect":6,"send":0,"wait":126,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxybet88.com/fonts/Open24DisplaySt.woff","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"ip":{"addr":"172.67.151.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxybet88.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 04 Dec 2025 08:45:35 GMT","end":"Wed, 04 Mar 2026 08:53:16 GMT"},"fingerprint":{"sha1":"52:6C:DD:7C:87:8F:58:24:F2:55:85:A4:50:F8:96:B3:99:AD:52:90","sha256":"FC:A4:9A:94:64:ED:4C:E1:1F:E5:C4:2F:35:A1:E5:7E:94:C9:4F:3F:21:3A:B3:36:87:3D:22:0B:B3:5F:F7:75"}}},"request":{"raw":"GET /fonts/Open24DisplaySt.woff HTTP/1.1\r\nHost: oxybet88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 22 Dec 2025 09:36:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjcOdRrFG6zEItvf%2BZytUBqf3fIQCCOX7QXwk1Lx0Yk%2F4awPEiKVPxTNNxCRE1RncUZRdWKFZuyG9TE1diRkdg%2B%2BY%2FRzIqLpwGw%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\ncf-ray: 9b1ea2240895b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29230,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11452), with CRLF line terminators","md5":"22dd2a290abc9f83b61489b7f8be6765","sha1":"4fd5d1a1f6525109273c72721b42f76b8a21afb8","sha256":"b52c8acf1969b95bc8a7ecdd32c217016c2b3dcb9b72c6368858035ba70ff1ab","sha512":"d1cbc432f844bbf72b54956b07603a937c543ae449fcf03eece156af15c1887885bca78bfccc8b1f8c6f7d23fe11d6a7d51a8e2fbd1c1f35807f7c1df6721875","ssdeep":"768:QDpEbzVbqYVbRwLJIwP/pqwOkwuHepy5hQSG:vfwLJIwPBqwOkwuHepy5hQSG","tlshash":"4dd2b733a0c1100fa337d0996dd0bf98eb168607974696eabcad625b5fefd904d2325c","first_seen":"2025-12-22T09:36:37.576232Z","last_seen":"2025-12-22T09:36:37.576232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"oxybet88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oxybet88.com/","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"ip":{"addr":"172.67.151.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T09:36:07.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxybet88.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 04 Dec 2025 08:45:35 GMT","end":"Wed, 04 Mar 2026 08:53:16 GMT"},"fingerprint":{"sha1":"52:6C:DD:7C:87:8F:58:24:F2:55:85:A4:50:F8:96:B3:99:AD:52:90","sha256":"FC:A4:9A:94:64:ED:4C:E1:1F:E5:C4:2F:35:A1:E5:7E:94:C9:4F:3F:21:3A:B3:36:87:3D:22:0B:B3:5F:F7:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oxybet88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8ISEtRHK4MMMUM%2BDw76MMx2ex1Vro3hB4As5Ug%2Fdecpj2fht4T0v2bXGyYHgNCXTr%2Bk7wXbIs7LMRhKSGQEbzaDgY1u9MxKi5w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1ea2117b320b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":29230,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11452), with CRLF line terminators","md5":"22dd2a290abc9f83b61489b7f8be6765","sha1":"4fd5d1a1f6525109273c72721b42f76b8a21afb8","sha256":"b52c8acf1969b95bc8a7ecdd32c217016c2b3dcb9b72c6368858035ba70ff1ab","sha512":"d1cbc432f844bbf72b54956b07603a937c543ae449fcf03eece156af15c1887885bca78bfccc8b1f8c6f7d23fe11d6a7d51a8e2fbd1c1f35807f7c1df6721875","ssdeep":"768:QDpEbzVbqYVbRwLJIwP/pqwOkwuHepy5hQSG:vfwLJIwPBqwOkwuHepy5hQSG","tlshash":"4dd2b733a0c1100fa337d0996dd0bf98eb168607974696eabcad625b5fefd904d2325c","first_seen":"2025-12-22T09:36:37.576232Z","last_seen":"2025-12-22T09:36:37.576232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":549,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"oxybet88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73132\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:08 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"b52f38ef99ad402e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284545,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":124,"dns":1,"connect":8,"send":0,"wait":28,"receive":10,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.8.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qahx8B0PANVsxXAMkLHhiEaU1VOys6H2wcGHgKDQZVyBG5q4D2%2Fxs6%2FmhwKJV3b%2BcjPDXq6Hvrhe%2FPFLBEyVMwKu8XFnOqIrno%2F6Qdy5cRuN590%3D\"}]}\r\ncf-cache-status: HIT\r\nage: 1470300\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Sep 2023 01:45:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"e4c542a7f6bf6f74fdd8cdf6e8096396\"\r\ncontent-encoding: br\r\ncf-ray: 9b1ea21739f2a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54926)","md5":"e4c542a7f6bf6f74fdd8cdf6e8096396","sha1":"3a0571a695a35f238026b9398386dc99d9a0c56d","sha256":"eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3","sha512":"80c8d07836842c9d2bc8223e16d22dbac53d3240227c265c1aaefcf45af3922338f43f256c38686946885f8012535f3bc287cc3658012787246eb5ccf6c13a3e","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF","tlshash":"76330ab8e54c41d9a731c44fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T14:33:33Z","last_seen":"2026-04-05T14:13:40.127899Z","times_seen":21258,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":131,"dns":5,"connect":12,"send":0,"wait":7,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"for.ashleyndesigns.com/img/asia/kasih-keras.gif","fqdn":"for.ashleyndesigns.com","domain":"ashleyndesigns.com","tld":"com"},"ip":{"addr":"104.21.32.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ashleyndesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:21:47 GMT","end":"Sun, 15 Feb 2026 12:20:19 GMT"},"fingerprint":{"sha1":"85:14:CE:E6:5D:65:43:E1:55:B0:03:4D:17:66:5D:D2:FF:1E:A5:8E","sha256":"2B:EC:C1:F6:5B:D6:F2:B4:B3:69:43:11:2D:45:16:67:3C:BD:1D:53:A3:1E:B6:F0:59:A7:CC:25:70:CF:85:28"}}},"request":{"raw":"GET /img/asia/kasih-keras.gif HTTP/1.1\r\nHost: for.ashleyndesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\ncontent-type: image/gif\r\ncontent-length: 434504\r\nserver: cloudflare\r\nlast-modified: Fri, 17 Oct 2025 11:11:52 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHhzWeMi1KuevwVU86QIdklwAbIC9GmbXfU0dXWMyUUxXDyDCvJzMsNJ0nkvn6VM%2BCmuGRDmwtvloJA0hdQ4%2FJHwjDO5zdx%2FQ4OZLLjzNx2x4NC8\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 9b1ea2171e5a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434504,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1479 x 405","md5":"130029d6555dbf8aea163884a5bac121","sha1":"ffca396048461166a7ae02a04f2b97c2cd9c38bb","sha256":"8ceea650fa5e906cbe60c82926ab1303333f21e88ec9dfea0d3a04f9f5080631","sha512":"50c5d234e3f80989d3caafadf1c1f0b5199e53365657a0ff2f2042ac7b91ad0645d4b4fd2fe6214b2af06ae0c658f4c3474382e6a40c8e33b2ecd02f395e56e9","ssdeep":"12288:Ciyscj9PZFmcDT9gxFIYiqsLnkL9jKdxAGncLf:C3Fm4xLdnkUdeGncLf","tlshash":"4a942376f6d2f6d67d1923390d1a636d8c602cad04bca7726041b90e01fade7b7a0396","first_seen":"2025-06-28T11:37:37.990848Z","last_seen":"2026-01-17T08:38:12.877512Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1284,"timings":{"blocked":98,"dns":13,"connect":14,"send":0,"wait":354,"receive":689,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"for.ashleyndesigns.com/img/asia/live-chat.svg","fqdn":"for.ashleyndesigns.com","domain":"ashleyndesigns.com","tld":"com"},"ip":{"addr":"104.21.32.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ashleyndesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 11:21:47 GMT","end":"Sun, 15 Feb 2026 12:20:19 GMT"},"fingerprint":{"sha1":"85:14:CE:E6:5D:65:43:E1:55:B0:03:4D:17:66:5D:D2:FF:1E:A5:8E","sha256":"2B:EC:C1:F6:5B:D6:F2:B4:B3:69:43:11:2D:45:16:67:3C:BD:1D:53:A3:1E:B6:F0:59:A7:CC:25:70:CF:85:28"}}},"request":{"raw":"GET /img/asia/live-chat.svg HTTP/1.1\r\nHost: for.ashleyndesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2034\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Apr 2025 12:17:39 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1L%2FgClB8inb%2BECE7h0f%2FH772vd%2Fn0F0mmbfG3GBeGP2xWC63szi8qGAevb4TjNhfyEmbtuouXk0RQ4U6pLqjDupsjJyRMSvtPBupnUvSOSb%2F6g5d\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9b1ea2173e825693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ae9d6a7c700f4211e6f667992ae6d0d","sha1":"17aec851cc297056d4b1b81407b73641dac17a7d","sha256":"67d3d6be4e1fe2a5524ae3c8e48fc2908accaeb18a2960edbe8f505429f55bb6","sha512":"32201b64a5a54080dd949f584371b630632bc5620f1d36a33a490b5fc4029545e154c1e3fd66051dee305811931dc83398fab3fac1dbbbd084c02e4eea797b54","ssdeep":"96:tvfyECgk+9/Ye/4Fsu8DQbSDPtTyIB9K9vtq5sU3BV095q7eyb4WwU:tyECY1YegFsuFwPxyIzKVtqf26ic","tlshash":"02a1eb034310d3fbae9541688768288979e2edebe474f1d8baab2457d60ccd0558c7fe","first_seen":"2023-10-30T02:56:44Z","last_seen":"2026-02-28T22:43:29.889525Z","times_seen":173,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-anim-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2471\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:09 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"c96f47574b80ea52\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6167,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6054)","md5":"71618d10f7356c378595c41246fb6543","sha1":"6b75cf807b5be56d947c4599bd1d1c2735a10960","sha256":"88b28d083673fc44c0dccfa7282b2e3fd27d2b229eb65e9196329c16038337b0","sha512":"7f7678570ca06cf608fcc7c5aec6ce5698d7b9bf8d990a56cb28a0f38d11bddb0d745638f8484306d7ebf5079dc802df37d830c1269fb3feef4828124798524e","ssdeep":"96:4V9HqqXQL8e05UjvNvECpPlVyiJl4wxQYqvjVYeUEyEJXHOCXOV7:KHZQ4hGvNcCpLr/xQnxN3oV7","tlshash":"c3d1a6ecb292f0729b9774e5802f000bf93da539908bc450d614e8e569bd99e4173f3c","first_seen":"2025-10-21T18:06:54.960525Z","last_seen":"2026-01-06T10:11:03.411712Z","times_seen":297,"resource_available":true,"data":null}},"time_used":1107,"timings":{"blocked":532,"dns":1,"connect":9,"send":0,"wait":17,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oxybet88.com/fonts/Open24DisplaySt.woff2","fqdn":"oxybet88.com","domain":"oxybet88.com","tld":"com"},"ip":{"addr":"172.67.151.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oxybet88.com","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 04 Dec 2025 08:45:35 GMT","end":"Wed, 04 Mar 2026 08:53:16 GMT"},"fingerprint":{"sha1":"52:6C:DD:7C:87:8F:58:24:F2:55:85:A4:50:F8:96:B3:99:AD:52:90","sha256":"FC:A4:9A:94:64:ED:4C:E1:1F:E5:C4:2F:35:A1:E5:7E:94:C9:4F:3F:21:3A:B3:36:87:3D:22:0B:B3:5F:F7:75"}}},"request":{"raw":"GET /fonts/Open24DisplaySt.woff2 HTTP/1.1\r\nHost: oxybet88.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 22 Dec 2025 09:36:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdEjEKQPhBUGrd17UVcp4GM4fapDmfZZaMKmVCi4g%2Fo%2FKpToVkdan7QfNYzW8YH%2FIC6vdt4tmhrvLRElb0BVq89WfuQLarDPX4I%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\ncf-ray: 9b1ea2208847b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}],"data":{"size":29230,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11452), with CRLF line terminators","md5":"22dd2a290abc9f83b61489b7f8be6765","sha1":"4fd5d1a1f6525109273c72721b42f76b8a21afb8","sha256":"b52c8acf1969b95bc8a7ecdd32c217016c2b3dcb9b72c6368858035ba70ff1ab","sha512":"d1cbc432f844bbf72b54956b07603a937c543ae449fcf03eece156af15c1887885bca78bfccc8b1f8c6f7d23fe11d6a7d51a8e2fbd1c1f35807f7c1df6721875","ssdeep":"768:QDpEbzVbqYVbRwLJIwP/pqwOkwuHepy5hQSG:vfwLJIwPBqwOkwuHepy5hQSG","tlshash":"4dd2b733a0c1100fa337d0996dd0bf98eb168607974696eabcad625b5fefd904d2325c","first_seen":"2025-12-22T09:36:37.576232Z","last_seen":"2025-12-22T09:36:37.576232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"oxybet88.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Dec 2025 21:09:29 GMT\r\nexpires: Wed, 16 Dec 2026 21:09:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 476801\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-05T11:12:12.625456Z","times_seen":45645,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":94,"dns":4,"connect":23,"send":0,"wait":9,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.1/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.8.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 09:36:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldirTAK9a4nt7MeFfXR8gmdRIyvTJ%2BzLvDz5IC%2FWerfi0EZiPhEJ0N%2BDcxwzI0mH3haSnWu6GshhHV8oS1lnV6mNCuSDJ7TFF5%2BiJtn9g8E0\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"418dad87601f9c8abd0e5798c0dc1feb\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:57 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b1ea2210f8e0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74256, version 329.-17761","md5":"418dad87601f9c8abd0e5798c0dc1feb","sha1":"a6b003ef506e92d05cde73adf67487d7fd7ec6df","sha256":"f18c486a80175cf02fee0e05c2b4acd86c04cdbaecec61c1ef91f920509b5efe","sha512":"99b9741f2a1c1d50e011c934c2445b07d9460f320ee60132b87d6594e9d91dbf3436849ae4745e29c58ad77846da5ac3f3c5beed8389cf8a8177c1e47f1aa8f6","ssdeep":"1536:3nUMyNUj53SHOhpTr+rqlyKPqdyTp9YMjmqbuOOiHggOI0zVX2H4aHDwXy5g/2Au:EJNUjdcsZqraPq8p9YMtbuOc20FBXy5t","tlshash":"47730265d1a1c05fee13c1513a7ba6ec13172c691a539ea7d40adac8cdc11b8e9ce18f","first_seen":"2023-04-05T23:05:54Z","last_seen":"2026-04-05T10:21:23.620716Z","times_seen":6479,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":44,"dns":0,"connect":4,"send":0,"wait":126,"receive":54,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3937\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:55:43 GMT\r\nexpires: Sun, 20 Dec 2026 10:55:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168027\r\netag: \"a1ee3895c747c6e2\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12729,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12614)","md5":"a87e2cce7117be00fc8129abfc72b1a1","sha1":"26d9bc2bbbd56217163ec1ccf05a4b4698e5c11a","sha256":"f65efecffe50465d1ffa59d289200cb42ae6115fac8232946635cedf4dd241ef","sha512":"d9232a321d406c6d15a92fcfb3266ab1a049fee6099c19fb010ee7913e2d6c1a65868a2f529ffca06dfb96b312a78429b07c3a5bd56b14f53199ce88af09a458","ssdeep":"192:8fQHMOgzKBbnnRrVGjoPGlxrO2tHxg7HzMb5F4g5A4WR2vN:20g2BbnnHUgTzMb5F4g5A4WR2vN","tlshash":"d042a424a54be2ac530341b484fab94a757ecd4fb8104035f0118ededf99e48bd7ba6e","first_seen":"2025-10-21T18:07:40.626035Z","last_seen":"2026-01-17T06:31:39.878615Z","times_seen":1395,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-selector-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-selector-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3338\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:08 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"6726aa502f63ce3c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10136,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10019)","md5":"46ef97a117b2fc2e78e4c701da40de5a","sha1":"58a633258acec0247e4417091d72197cf22bfe87","sha256":"4e136d67f20e2a33a4aa182cbf5e178768d5aafc6b75da16aca7ae975c8aeece","sha512":"b848d1e89e84e3a8fec78bc87f34965e9f10580e0a564bd0106d1ff7697cd2036c73025992447acfcdd4fc785cf13df11b2f7a50db56370bd0c5787ec8866304","ssdeep":"192:oHfKZ9ujnS/IgKAd4QrJm1PIJdHGa6IwgE6NsbwvuH3dn:06GSdYAYmAIwoPuXR","tlshash":"3922947e7156b1354edbb0b6841f148af636a579608f8068f214e8d73c3c88a9573f3a","first_seen":"2025-10-24T06:58:03.697596Z","last_seen":"2026-01-05T14:42:07.132769Z","times_seen":142,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":114,"dns":1,"connect":26,"send":0,"wait":22,"receive":2,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Dec 2025 09:36:10 GMT\r\ndate: Mon, 22 Dec 2025 09:36:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"462fe67abc03f51e1782b080257fb35b","sha1":"34ab002df028d39d5d9d1387b7ad235291c6f240","sha256":"812226c2d9320911b94d2168f9a1f205391201c424931b2e1a97f279c235b4b7","sha512":"16bbae0cfd1165c71088b1285b004dc365293926a3581c55c4e7cb3538e244c5b96f4d83d0529125e4c63a09ecb6d3192a25ed36cbd0086930f33d44c1f7c245","ssdeep":"96:1OEbaNjlOEbaNGFZKOEbaNgOEbaNXTOEbaNby+aZjzBrgOEbaNyubqGIFuV4yOEQ:2NjmNGN/NXkNbqbNtbqGIwV4BNbNZwNS","tlshash":"1bc10d91041b04409b834cd227ce7f34fe1f92106145d0b9ebfdab6b9ddbda6426835e","first_seen":"2025-11-19T00:56:02.735302Z","last_seen":"2026-02-19T20:58:44.99154Z","times_seen":7358,"resource_available":false,"data":null}},"time_used":3190,"timings":{"blocked":1577,"dns":5,"connect":31,"send":0,"wait":29,"receive":0,"ssl":1535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-carousel-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-carousel-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11515\r\ndate: Mon, 22 Dec 2025 09:36:09 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:09 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"f9cfbf38076bddf4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38737,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38616)","md5":"c76a77d3b71efb0d41cdf06424ba00f1","sha1":"b2abd342fa0c01d1614462577fd975b21953cd33","sha256":"2436d5f1fa1abcddd45d6a4f48f44ec4bf67dbd3cbf7113c7531e7e27b13eb46","sha512":"9c248240e9b65084f1bd30296cdd4bef220b98f884bc1051d156eb31e113e56ad489e9f5fff81946b4540c316b1d4682cf831793e9d27c37702b82583740f8d7","ssdeep":"768:4uCdWBuHV4qVy2STUktuIZfYpAOq3Qhgd7o+0:42unY3HtusfX3c1","tlshash":"4203d9d8b282b0754693a574406f110ee23e6919640b952cb0abdfdafdbc95e2137f3c","first_seen":"2025-10-21T18:11:09.659629Z","last_seen":"2026-01-06T12:56:28.820517Z","times_seen":583,"resource_available":true,"data":null}},"time_used":1112,"timings":{"blocked":536,"dns":1,"connect":11,"send":0,"wait":16,"receive":1,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-bind-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16378\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:08 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"09136aec911a07f6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51565,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51442)","md5":"71a0f3d77ab61466c52472cdafa2b5c4","sha1":"28283a80678fe0de5ee42353e362f5dc15265f85","sha256":"8ff11c4e92efd206bc49edebfbcb03aae6e3a13fbc7735302f28558a1756078b","sha512":"b357906a82fb997c00aeb1e90b0ecc0bb155b797c12549687e18757bc9d117474a765a0bfc77ee3c04772a88ab08d84b9f0f605e3da458745e698cb95ce13ba2","ssdeep":"768:wOCpyTqXz0meAZVUcDI3lwZ6HeJkjV9Mo25Totc:wYTqXz0mecVUcDIVX+J4Mkc","tlshash":"7f33b49df292b076479364b5813f600ae33f3956640f8524e06ae9c2bcbdd59a136f3c","first_seen":"2025-10-23T23:05:27.328069Z","last_seen":"2026-01-06T04:39:27.161306Z","times_seen":284,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-sidebar-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-sidebar-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9669\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:08 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"18ed7703ae791b89\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31525,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31409)","md5":"4e5eba6a1c557b5e3adccbcb29b7e062","sha1":"5c40ee3d36d34746e2a0f32bbe16de79ebd0f1e4","sha256":"5e0dbfd6866515c7faa98c9c4b47391a3b3ce320296057a237b8f902846eef90","sha512":"7c466f66d1f55e52016b87c358fe9f76a4843fb428cb1cf7cb35d526ab1d57e38928aadb29cf6df308d966ce5033a95f8b61e6098f28145d9c6241156c091f35","ssdeep":"384:AnXCVRcBmEljZ1u6YwAZkBbUfRwnowxwwYpD6RY59LMJEJ5MkFo5fgSk7:AXC0ljnhMD6RYzLoEDMlXk7","tlshash":"91e2d89cf292b0754697a1b4806f450ea23a7655240b802cf1aeecd6ad7cd8e7137f7c","first_seen":"2025-10-21T17:45:48.732204Z","last_seen":"2026-01-06T12:56:28.817Z","times_seen":518,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":116,"dns":0,"connect":10,"send":0,"wait":24,"receive":1,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:08.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oxybet88.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8518\r\ndate: Mon, 22 Dec 2025 09:36:08 GMT\r\nexpires: Mon, 22 Dec 2025 09:36:08 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"72f811f62fd2668c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26664,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26547)","md5":"7a415e5ee42491e232157db45c9e3d8d","sha1":"a8df74da9a81d02fec1fcaefd070e14926c12a91","sha256":"26834f5d8ef7ccfd67a09301a8d2efe391209197f6d8ac2d6fa087ce328bd779","sha512":"2fa66b057a0a2df89b6c1efddff89f4d983ce7f9ba54f40b704c000b8cfdf5e8a3971b07d1d1f0e14cd5cedf6406d89c7a9e9d48cdcab77121b1c3d2ec04c1dd","ssdeep":"384:4CXUpS23X0Y5kK64yAZkBbUbR+xDVgJAxTFRAGPBLcnaJRySLybHzr1415:4CXUVX6XPmG2ncxLybHzr1415","tlshash":"14c294ddf282b46942a3e0b5902f560ba23f6114644e801cf5ade8e66db8d5e3137f7c","first_seen":"2025-10-21T17:45:48.733601Z","last_seen":"2026-01-06T07:16:46.551181Z","times_seen":337,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":119,"dns":0,"connect":29,"send":0,"wait":29,"receive":1,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/ww.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://oxybet88.com/","date":"2025-12-22T09:36:10.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/ww.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oxybet88.com/\r\nOrigin: https://oxybet88.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14409\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:43:52 GMT\r\nexpires: Sun, 20 Dec 2026 10:43:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168738\r\netag: \"c7ebbca51fd38c37\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52015,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51902)","md5":"3aaf3c1a784f5423ed8a877282ced636","sha1":"7df73392d0ddaa7f549806030bda80546477c39c","sha256":"ade1d415f9cba0274e28f1cab6363fff1fce13cd436ff67b024d506de1daff37","sha512":"f45975602f682f6ec64fb21ac46ec3620bb057c6769a274d13d6724821aba6dda4bab2e622b5b777f38a6db6291abb9adeeb6cb80b47a3de86d155a7de641801","ssdeep":"768:Rz0GxCxt+8/Qbvn5JV1wAcz7PX7ywwJtFidG6zB4B73oLfdp7UNe/KD/o4PHfG:RXEI6d4B73oLdxUY/KDpPHe","tlshash":"bb331ab8b2a6a46e824350f4406f3009e67f2d2a704ac83cf635ddd56db4d9a81b7f35","first_seen":"2025-10-23T23:05:27.453885Z","last_seen":"2026-01-06T04:39:27.124651Z","times_seen":284,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}