Report - royal77vn.com/

Report Overview

Submitted URL
royal77vn.com/
IP
104.26.4.152
ASN
#13335 CLOUDFLARENET
Submitted
2022-09-15 11:09:26
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
34

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	44.237.163.41
d313lzv9559yp9.cloudfront.net	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	390 B	43 kB	54.230.111.67
sc.adelement.com	369099	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	478 B	186 B	63.32.10.50
ib.adnxs.com	241	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	424 B	924 B	37.252.173.27
secure.adnxs.com	396	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	383 B	11 kB	37.252.173.27
royal77vn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	650 B	172.67.74.249
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.35
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.25
static.r7content.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	35 kB	3.8 MB	172.67.184.110
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	371 B	46 kB	142.250.74.72
ocsp.sca1b.amazontrust.com	1015	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	338 B	944 B	143.204.42.156
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	3.3 kB	93.184.220.29
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	62 kB	34.120.237.76
www.royal77vn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	135 kB	172.67.74.249
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	662 B	1.4 kB	142.250.74.3
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	362 B	21 kB	142.250.74.174
cm.g.doubleclick.net	202	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	920 B	2.1 kB	142.250.74.130

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-15	medium	royal77vn.com/	Phishing
2022-09-15	medium	www.royal77vn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	Phishing
2022-09-15	medium	www.royal77vn.com/Style/Font/FuturaLT.woff	Phishing
2022-09-15	medium	www.royal77vn.com/Scripts/icomoon/fonts/icomoon.ttf?l1yt7y	Phishing
2022-09-15	medium	www.royal77vn.com/Style/Font/FuturaLT-Bold.woff	Phishing
2022-09-15	medium	www.royal77vn.com/bundles/shared/css?v=tWtDTHGGKqL5aRIAq3CzW58GTWFZ7namrO34NpO8dmU1	Phishing
2022-09-15	medium	www.royal77vn.com/bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01	Phishing
2022-09-15	medium	www.royal77vn.com/	Phishing
2022-09-15	medium	www.royal77vn.com/Image/Common/Flag/vi-vn.svg	Phishing
2022-09-15	medium	www.royal77vn.com/bundles/site/css?v=QrbtpzLOcYxnx2L_a7jcNSk-dpkHy-IHdQI73VUwseY1	Phishing
2022-09-15	medium	www.royal77vn.com/Image/Common/Flag/en-us.svg	Phishing
2022-09-15	medium	www.royal77vn.com/bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1	Phishing
2022-09-15	medium	www.royal77vn.com/Image/Common/Flag/id-id.svg	Phishing
2022-09-15	medium	www.royal77vn.com/Scripts/BackToTop/img/cd-top-arrow.svg	Phishing
2022-09-15	medium	www.royal77vn.com/Resource/Index	Phishing
2022-09-15	medium	www.royal77vn.com/Image/Common/Flag/zh-cn.svg	Phishing
2022-09-15	medium	www.royal77vn.com/bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (19)

	URL	Size	First Seen	Last Seen
	www.royal77vn.com/vi-vn	161 B	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 677328f3517718b7cde95b988d4a7a39 4c550e50b50984393bb6d56f084d22373688c612 3a6f47b8f71941626708c700fbb46f249d1b6c716acd1c9c1359b6af65fa660b Loading...

	www.royal77vn.com/Resource/Index	4.4 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/Resource/Index IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash f301fc1b5c09f539a50f19e843845bb0 3017449be50be910cbecef9cae60507de9ac6b55 af7a5b3e1ed4c1f2b123d578968d1562ec92a5d6b86f19beee9e2a2ebc0488ff Loading...

	www.royal77vn.com/bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41	190 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41 IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 1f427655d189aacf74bb888d9e0f5ad3 95e8ce4b2a74a8b0c0d851700dd3ff3ca8e910b7 98cffa00d2a18c77548306289bc6e3c5c68b5459ab2e5b98904ad6a7d7843cea Loading...

	www.royal77vn.com/bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1	2.0 MB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1 IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 9143ca6b4add1adba70a994e42f9b3d4 c383f61d4b58a499aaba9719c7aec5f69a672f50 8e0486cb9ecd36476816b14bdf7dfd9c0ab9f70012100295519dc89356d8cbe5 Loading...

	www.royal77vn.com/vi-vn	542 B	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash e1221856319fe98ae1af490253f5dcbe 1c445ef9785cb8153615ea2839083cd9ab4694f2 e6d7a205b07f275d90c33392bc5bf92f594d31d996718c3561d9af675c6e80db Loading...

	www.royal77vn.com/vi-vn	465 B	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 3141ed52703880641cdc85269126ea72 e928066eaa15224e75ee590a70249d78d3fb6c50 5dd84d5c2ddc4bd8700906060a9f561a3a438672dad8372c9091c89a6145515b Loading...

	www.googletagmanager.com/gtm.js?id=GTM-T5C73L4	118 kB	2023-03-07	2023-03-07
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-T5C73L4 IP 142.250.74.72 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash f80caa64233ac214038cc5e09db1f516 2aefd2829dee01698eeeaf6f16d6d5de88129935 6fdf2b46f884103bfca867d16a1564563c6ef3d94b32d1caf5c2ff4cb786815d Loading...

	www.royal77vn.com/vi-vn	348 B	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 5eac9aac44937cbfa96f7f31510b7a45 c45ad0e2e08045aaf07e1507643f6d4f8640a2f9 95f88e687f17921e8816232634d1d39b567c4e2bdb448ca56426f45b17f79464 Loading...

	www.royal77vn.com/vi-vn	1.3 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash e7c298239b1c69cb1a2707887e9b1923 7a283c98840b3c86c8138a1a563be1702268f8c1 15af341ccd450c284075f2efd2b6ce030badd3b38207fa532159ced31c414e25 Loading...

	www.royal77vn.com/vi-vn	1.4 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash a73fbcf95c2ef0f70fb0c8602d3878af 0fa0061d9331a3a21835e494fd3bda6b3d5c6ba7 b104ec0962754e5214a4b4ae6f374461e0c69454fe51ba862ef227ce2faaa978 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-07	2024-05-09
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.174 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-09 09:39:13 Times Seen854 Hash d40531c5e99a6f84e42535859476fe35 a901817d77b2fe5259c298c91bc65c54d7f8a1a9 a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210 Loading...

	d313lzv9559yp9.cloudfront.net/f32759c50f263c370d528f5f196c72f9.js	163 kB	2023-03-07	2023-03-07
Pretty URL d313lzv9559yp9.cloudfront.net/f32759c50f263c370d528f5f196c72f9.js IP 54.230.111.67 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 7930f73f33ddf12ade59e75b00ac946b 56d13a71acd13b8d3a79935bbcf61342dbd4ad57 9fd0312c8ac8b1fa140c1f9b266702ae377fa3ab073e2957e5e3c072fc997835 Loading...

	www.royal77vn.com/bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01	17 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01 IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 80da9e67f0f398f1b9151b8e62c9630d ba526d597c3d34dcc8724d3ab4aa887eebce3ad0 c125c9759cae4a6b3c260a9c274b38baeea01eadc6138bb2c11fc3b46b6d6cf1 Loading...

	www.royal77vn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-11
Pretty URL www.royal77vn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-11 02:13:00 Times Seen56587 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	www.royal77vn.com/vi-vn	1.0 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/vi-vn IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash 7a20282c9e9708eb76622f3c06a22570 7abe654ca87dcf9c505b821fc5e5dab7fc3af97d bee124cb7c3ec17c2db7675d0f0668e36a88d886a00bd6d2896e9f66a0c2b9d9 Loading...

	www.royal77vn.com/bundles/main/script2?v=mhwsRbK5i6cdeU_EQ18zKEbBbu_jA-dBvALXx_BgsiY1	182 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/bundles/main/script2?v=mhwsRbK5i6cdeU_EQ18zKEbBbu_jA-dBvALXx_BgsiY1 IP 172.67.74.249 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash db9d9d06fb42bb7982284547cfe96bbf 74d5bd88ff6b3ed8f73e1b8ff321b232e59c9f9e b07d9e2c9e65805cdac812d0e114262c8fb5009c08ea90b94d7fa2cb28bec1a7 Loading...

	http:blank	580 B	2023-03-07	2023-03-07
Pretty URL http:blank IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash e8a3c28dab58af8093bfe2c7547eb060 b663e12660f82b85146a89c8cf225c91839aaafe 810d36ee3332ffecb2e0fd9ede1d22368dc475d996acfa7ffa4e9680df1160da Loading...

	www.royal77vn.com/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1663228800	39 kB	2023-03-07	2023-03-07
Pretty URL www.royal77vn.com/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1663228800 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:54:28 Last Seen2023-03-07 16:54:28 Times Seen1 Hash d2e63c641c3377eefb2f92b6d76deb6a cfe9f9bc49d21e7db829997544ac7626dfa36e55 2116335353a6547d40e867cde1c65b0d69e67b2f74abbb854ec49eb8d2fb6c1d Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9e925e9341b490bfd3b4c4ca3b0c1ef2	4 B	2023-03-07	2024-05-11
Pretty Observations First Seen2023-03-07 01:03:43 Last Seen2024-05-11 02:27:07 Times Seen352102 Hash 9e925e9341b490bfd3b4c4ca3b0c1ef2 c2543fff3bfa6f144c2f06a7de6cd10c0b650cae 1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408 Loading...

HTTP Transactions (137)

URL IP Response Size

royal77vn.com/

172.67.74.249

301 Moved Permanently

0 B

URL HTTP/1.1
royal77vn.com/
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Thu, 15 Sep 2022 11:09:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 15 Sep 2022 12:09:14 GMT
Location: https://www.royal77vn.com
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oOknJtSyohQMVf7VT2Fs2acRz77M48vT2Fusi92vRAmBQ4czIA%2BMqepgDxQfimAEzku5uWodsMCM6rR6BhULfM7AxNVAkn%2FyzrH18%2FJphtndOQUjvyLWAIMoYCt%2FRfw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b0e8b8ac7f1c0a-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5970
Expires: Thu, 15 Sep 2022 12:48:45 GMT
Date: Thu, 15 Sep 2022 11:09:15 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 10:10:23 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iPs_kqqhDwLDzP7z4iXdxgxkQq4Besl-x25-OhcSZxfzmBGJgutUvw==
Age: 3532

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain

143.204.55.25

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
143.204.55.25:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X8uYHWrij8yyp0dH_uLiwTeRV3jbBMEIgdPd_3Vr-dSdTP3-O0i1MA==
age: 23640
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 11:09:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 15 Sep 2022 11:03:22 GMT
Expires: Thu, 15 Sep 2022 11:57:55 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1co9NJlr35Z-d_4zPBVqBUwvzQOzR8_XpCfyYt_m7d6NQRAh3zDrnQ==
Age: 353

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1935
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:15 GMT
Last-Modified: Thu, 15 Sep 2022 10:37:00 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

44.237.163.41

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.237.163.41:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JsuXarsAzaV4qj7mQgMCew==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uf9T54+dRdmhF9MaP3WxnunNx/k=

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
0447e477684b8c6d2b3b351e5c0f1d74
ced90e243f950b5b7d7a8ae238167a2b1ce06c88
e89f5d52b17846f7a8be849d8b7748bf67c3d55536e08127ec64076686b5cdc4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:17 GMT
Server: ECS (amb/6BB7)
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
0447e477684b8c6d2b3b351e5c0f1d74
ced90e243f950b5b7d7a8ae238167a2b1ce06c88
e89f5d52b17846f7a8be849d8b7748bf67c3d55536e08127ec64076686b5cdc4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:17 GMT
Last-Modified: Thu, 15 Sep 2022 11:09:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
0447e477684b8c6d2b3b351e5c0f1d74
ced90e243f950b5b7d7a8ae238167a2b1ce06c88
e89f5d52b17846f7a8be849d8b7748bf67c3d55536e08127ec64076686b5cdc4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:17 GMT
Last-Modified: Thu, 15 Sep 2022 11:09:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
0447e477684b8c6d2b3b351e5c0f1d74
ced90e243f950b5b7d7a8ae238167a2b1ce06c88
e89f5d52b17846f7a8be849d8b7748bf67c3d55536e08127ec64076686b5cdc4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:17 GMT
Last-Modified: Thu, 15 Sep 2022 11:09:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6170
Expires: Thu, 15 Sep 2022 12:52:07 GMT
Date: Thu, 15 Sep 2022 11:09:17 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6170
Expires: Thu, 15 Sep 2022 12:52:07 GMT
Date: Thu, 15 Sep 2022 11:09:17 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6170
Expires: Thu, 15 Sep 2022 12:52:07 GMT
Date: Thu, 15 Sep 2022 11:09:17 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6170
Expires: Thu, 15 Sep 2022 12:52:07 GMT
Date: Thu, 15 Sep 2022 11:09:17 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8447 bytes)
Hash
5a6939786c9343412c9af87efd3f44e0
14131148fda4e8d85b582fd20e76bcc814341bf1
8412c50f0fdc131d9c4422f2d7307fc1ee062c3580a1d754ef71cf84f9727d49

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 8447
x-amzn-requestid: 3237c2fa-bc17-4b8d-8afd-bacfaa90ca71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FypF7KIAMFd7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63145010-7052273b184685c83569c712;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzi_WnjJW5XjIfj8kyVL4LcQEjcuw1_zwrDiJegEZ2r8GOZcQahPEw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 48152
etag: "14131148fda4e8d85b582fd20e76bcc814341bf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.4 kB (9400 bytes)
Hash
4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: 8cf35176-18a1-427b-870c-bdae465060c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYM18E-iIAMFcmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ff4f2-427bc0ff6593e71e25b91589;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 03:11:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZVnPAYUOBCRUYD3wEx79lIMjBJCKyVB9CmnTqMJIaFPbQGPoHwB73w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:37 GMT
age: 53260
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e20bf1d-c24c-4dc0-9796-f2f870591ff2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.5 kB (6484 bytes)
Hash
cb7c9c7f4257ab79526157f3ba507d6e
098d000aebd7ba0637fe420b9dfdacd2146af240
74fd95bcffcaf6919e8bca4184978340bef089528f9d184e7d88e1fd4c83288b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e20bf1d-c24c-4dc0-9796-f2f870591ff2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 6484
x-amzn-requestid: cefd7270-c8ca-4ced-b9bd-52353fbefa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBIIUHOZIAMF9wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316ba35-7d4c4c53090c83ea3fadbf4e;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 03:10:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: V0CJvbFSNJT2eHVOeCkdZNStr6eZg3EO0YTNyTUsmiirYMm9gfzBKg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 48152
etag: "098d000aebd7ba0637fe420b9dfdacd2146af240"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9071 bytes)
Hash
1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:36:39 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 45158
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaa65c72-7c91-4c77-a8d5-ff1616735614.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.5 kB (4527 bytes)
Hash
3d3507225fbae159e0d4225dc60769af
2220cf9725452aa89070063038064596b03bb808
b19d7250778b93eed58347332f0fa8c2e4c8ca7a2b30e9d605d39d51e981255e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaa65c72-7c91-4c77-a8d5-ff1616735614.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 4527
x-amzn-requestid: a3fb26b2-9090-483d-9f41-ca3032b51262
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIQp3G_6oAMF5Jg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631994a5-300b56f13864ff1b16b85eb8;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:07:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: d33zVonEQST3V4997c3mKpqhIVtXgAMVzxbFArOQvC12sCGFrTAl8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:16:29 GMT
age: 46368
etag: "2220cf9725452aa89070063038064596b03bb808"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6770 bytes)
Hash
2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 48252
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
0447e477684b8c6d2b3b351e5c0f1d74
ced90e243f950b5b7d7a8ae238167a2b1ce06c88
e89f5d52b17846f7a8be849d8b7748bf67c3d55536e08127ec64076686b5cdc4

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:17 GMT
Server: ECS (amb/6B9B)
Content-Length: 279

static.r7content.com/Image/Branding/Logo/bs-logo.png

172.67.184.110

200 OK

14 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/bs-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 600 x 226, 8-bit colormap, non-interlaced\012- data
Size
14 kB (13802 bytes)
Hash
98fe8570b367c84f143f8364afa58546
a21f8ab218b90fcd3b640b0630e44a918d8e2e77
e6467ba4e000a132bdbcaa3d18e9a388b27bf82b3d78fca9f122df40bf1c54e3

HTTP Headers

GET /Image/Branding/Logo/bs-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 13802
last-modified: Mon, 25 Nov 2019 02:21:29 GMT
etag: "171910c37a3d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vdYDg3ER32fZcVB0QEfJxSvUJmBZqUlyVCqf36LJV6CVXxttt3WmaC6%2FpnJSGdX3A7xm3V5pBGErR6bwkPB6hySjUSJFeG0EGtrKeQBqVeMzahL4dODdWWinPBr9kdWdC5fF4HD34Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849621c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/pp-logo.png

172.67.184.110

200 OK

7.7 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/pp-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 820 x 380, 8-bit colormap, non-interlaced\012- data
Size
7.7 kB (7704 bytes)
Hash
8ef8f8436bb4eff962d665f68c1ffd53
b7120ef84b8a884236a3353f7d12061233f1a7f7
a0612b2be8d093a0b860ee9d359a12865f47aebc54a949e6925f7c74a5fe5c39

HTTP Headers

GET /Image/Branding/Logo/pp-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 7704
last-modified: Thu, 16 Apr 2020 02:57:06 GMT
etag: "e630dfb69a13d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WPZbJWgeW0hKX8RwqkCasoMLPHWDoM%2FkEV4YyoMtFl9XlezF2PIQqfuiQPBkoN38r3m1pe10%2BOtHjxbc72%2FqPJ%2Bqk4FDKLbxxCfLZm4xYxI2lb9X6kAJOuvNoWhfbXwQzukS%2B3CUqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8495e1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.royal77vn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

172.67.74.249

200 OK

2.7 kB

URL HTTP/2
www.royal77vn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
2.7 kB (2714 bytes)
Hash
751324e8b5e1e47692eb5f156ce437e3
71fa576366398f73f748cd3a1f14cc6a216c1431
f39e3a41a6648125abf551fb49d73688e469dbcf6c4b5837cd6463bf56399351

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:17 GMT
content-type: application/javascript
last-modified: Tue, 13 Sep 2022 16:56:47 GMT
etag: W/"6320b64f-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2F3ijfO%2FiyBF%2FGBPGQB5ZgQN6ItK7d46oMVI8wuB86N62jBno87C2uSDy591Ok6pI0LK8DbLgAmnZ4oaMjt2cN2cpZNQfLf9SfjRKUUIqzqUk4Kpd7Du5UeQU7LfqLjBB7It"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c978fc0b4d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 17 Sep 2022 11:09:17 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/HG_QRCode.png

172.67.184.110

200 OK

3.8 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/HG_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3779 bytes)
Hash
0f7152638add0f03d8c8d1998eb128e4
c9671343372b742219939b10f4f8d64c62ca44fe
67b94a50b473381cfe227bab8042ff29402e9647b185cc59bea9c44dc5858223

HTTP Headers

GET /Image/AppDownload/QRCode/HG_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3779
last-modified: Tue, 28 Apr 2020 04:55:18 GMT
etag: "42dfb236191dd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UiREjV1m24%2FLksfVbHAkJcpx4jIuOCrFkyhnlRkkJnSqLbflCh0Hid5gunl6Pm%2F%2Fh9xoImGHSi5%2FxKeuDLqha%2ByiqZD%2F9z1BldAoVGKPFxvgzDClCtuk7kBjf26PBBp9Vs32IvVxNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869971c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/EB_Android_VND.png

172.67.184.110

200 OK

385 B

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/EB_Android_VND.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 1-bit colormap, non-interlaced\012- data
Size
385 B (385 bytes)
Hash
cf2dfc2d83f2afc38d3273853e763a9a
982e072e58c5bf3c76af0c55982a286a89426b44
b853bd27cbb92a82a606145d5b171beeb043ed1db5f576e8dc7bcb8316fa2ec2

HTTP Headers

GET /Image/AppDownload/QRCode/EB_Android_VND.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 385
last-modified: Mon, 31 Aug 2020 02:04:02 GMT
etag: "0552dff3a7fd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AVhFCOvok9j37j19nwigS0xGkT9Pffxn1tmZK2q1EsRO2Wsc61rAtc%2BsrmJMzXkjZNNnTPojUY2Z%2BUbPScX3rI2iaDEptIG70Ck1CR9TdPfvGenzIK%2BNJwbkf198IyiRBbidEDo1sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859931c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/GPI_QRCode.png

172.67.184.110

200 OK

487 B

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/GPI_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 1-bit colormap, non-interlaced\012- data
Size
487 B (487 bytes)
Hash
ada823dadd86997a5c4a37123f9f900a
6a1e4d6540c8b9a0b092c21d0a1869ce6a33aebe
b62263ad4835996f36d7336bc5309a62c5c67a5dc3db3ff85301de1bcade973e

HTTP Headers

GET /Image/AppDownload/QRCode/GPI_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 487
last-modified: Fri, 17 Jul 2020 05:44:22 GMT
etag: "3930e152fd5bd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JcyQWSssVqVcFhYLMA%2FxMuS9l2YuaLQpRexYwpOl%2FbwsjMZeZAtEIieCcc%2FVJC80WeGglJ5mOin%2BZv6gZWndQLQ77id8oaSskygiCm6gKmEI7CNp5FbU1whIzAsMk06T4on0ZSQZ0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8699d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/gpi-logo.png

172.67.184.110

200 OK

11 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/gpi-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 482 x 96, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (10931 bytes)
Hash
486040e695dc1985da15612b2fe13102
3014f97a2b8ff6df2f1a19b1683785ecd5371126
8ad0c7862eabea9fb16e949cf916b5800254dda89741d835a0ba813a54806b0c

HTTP Headers

GET /Image/Branding/Logo/gpi-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 10931
last-modified: Mon, 25 Nov 2019 02:21:30 GMT
etag: "25c39cc37a3d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4mbAD6ZRVyKaJwEeIBEjNMdyaGvTUt%2BPZi4IjnhdMH9PNcyGAqe7RfDi%2BwwThruulU78w6lgKr3YX%2Fc9beVGlsmwlmhxk39YWC%2F7YarQ1FsR0nvG9ZiaMUv%2B3E%2FyuOBUdAWm%2BE5DFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859661c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/hg-logo.png

172.67.184.110

200 OK

14 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/hg-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 500 x 186, 8-bit colormap, non-interlaced\012- data
Size
14 kB (14172 bytes)
Hash
f7a27727125b8b47051008b215505ae4
a77c5fa3d637f686732750366cda98ecc27335c3
ff59c2c45330f3fa204369858b5bc760c7ac8cbfdcbd6faf4a97a19fea7fe263

HTTP Headers

GET /Image/Branding/Logo/hg-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 14172
last-modified: Thu, 28 Nov 2019 02:58:39 GMT
etag: "88b25bc97a5d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=58XsvF4iDJCyTkhzmdVvlsDZzo6wSbgZYpDTaKkVJYplUJS07fL3VlwQt69Kj8PzogtnClkSjCwisMHBiT9xJvtbjTD0KW%2Bdu4%2BSmpJGZChCnDye4SvBINZHxBgYmtMwFnS4VnMK4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859741c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/ttg-logo.png

172.67.184.110

200 OK

7.4 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/ttg-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 500 x 130, 8-bit/color RGBA, non-interlaced\012- data
Size
7.4 kB (7419 bytes)
Hash
96c39d3cc5fdd62bd342d41a38dd62fb
336e99066e46eb60923820fc7baf4b168dfb4f55
5dfd20d29eebd4a2ce899dffb788236c22ac75d1eba1e145e2ec4a3a2ddca932

HTTP Headers

GET /Image/Branding/Logo/ttg-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 7419
last-modified: Mon, 02 Dec 2019 01:43:56 GMT
etag: "191c0f5b1a8d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jv%2Bsp7PhDnOe6FZaG60%2B0oJfd0TmnJG4TtDJYrAhFPM3L5m1%2FHRL6CHbIKyg8VXcDFMncXXq7CxtcxSWZJdlcawM54651Gb8e7lG2pnR%2F83r3m5IJpU%2BT3L6tJz1i9YxCRI9IruO7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859831c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/QT_QRCode.png

172.67.184.110

200 OK

3.8 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/QT_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3759 bytes)
Hash
b4633777381cf67ac36e906967b5f370
97ecf3f7025048b1034744b4e5a2412f39e5e706
d208daf36ba075a4330f31899c32757dc69c0ce5c3a93c8ca824c0af3d103329

HTTP Headers

GET /Image/AppDownload/QRCode/QT_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3759
last-modified: Tue, 28 Apr 2020 04:56:12 GMT
etag: "3b82757191dd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jCNp%2FV1gBT02HLYdfDIP6ZO%2F7rFDd9ZZOl4QXxu5T9Y6r7Wz0rK95BmQ8ayS0hfdrzTd5gd47cGDBrMPKihpAob4oA6NUGfJL1ClQyuUdNv6qsr8eZvmd9OrnjZYPP1dTUBu5fWDYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8699a1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/brand-Royal77-logo.png

172.67.184.110

200 OK

4.8 kB

URL HTTP/2
static.r7content.com/Image/Branding/brand-Royal77-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 190 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size
4.8 kB (4803 bytes)
Hash
d2aac3da22a46563fd62743073efa679
70e75995ebd24a834622508f896dd2005b506223
b819293c5b9cc8d1e5e48465cee233fe70171206853e29352ea9449ea0ac5f09

HTTP Headers

GET /Image/Branding/brand-Royal77-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 4803
last-modified: Thu, 14 Jan 2021 07:01:35 GMT
etag: "a974261943ead61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X1h1vsatY4%2FRxNaoKlAqyzqPVuGW%2Bu8AXusw6iT8ct0vWebW3Q1YuorfL%2BhVa%2Bvo6vEkakk4pOycjLj3SyMQDDfeziD%2BFYMg4L2kXzQhYfMLw2Zh2AJvJgDyq6JrDXpX%2FFY%2Bke54HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869b51c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/ag-logo.png

172.67.184.110

200 OK

13 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/ag-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 228 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size
13 kB (13276 bytes)
Hash
2d48feed9a5476c20f1e272aca353d7b
0ed71f2b9d5a9afaacbe10d1f90cdb300cd92735
77f30ec8cce7c7a2944bf54e4a403de00800e41b31e8a08c0367627d33864fbe

HTTP Headers

GET /Image/Branding/Logo/ag-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 13276
last-modified: Mon, 25 Nov 2019 02:21:28 GMT
etag: "1fc2fb37a3d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wzEJJQ6oBQCO5umGVXx7ZJ%2BRlq7nZn9DySeuY3jzUBOKg9Eimz%2Bv%2Fve9ZCoML2IYAwybyqPC1PW1XT4BI1SKpsO%2BRHksC7Ae2kDUkPYZkPhkFW2%2Fu51h%2BMGdhp4I%2FBcbMw%2BMcYG7zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859851c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/DG_IOS_QRCode.png

172.67.184.110

200 OK

3.5 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/DG_IOS_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.5 kB (3463 bytes)
Hash
4080808607bece76192e72251a0cd7be
ef3dc562558803935f6b4c8b2ea4bd52cbb4e926
5c3f0a375d6dcc710ff998382774b08fa904bc6ceb6c280e7da757f6cc78b3c6

HTTP Headers

GET /Image/AppDownload/QRCode/DG_IOS_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3463
last-modified: Mon, 08 Feb 2021 02:15:22 GMT
etag: "d3e15e41c0fdd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OsQhw8bZPpH6WcmP7qfhej1gR%2Flc19FRbLoczfx7F7F2oaRAHLFdNiFJTWhGa7wgY99kRqsXVbedKEj3ni%2FqaPhLYe83VdU%2F5D5OEMefkwm7XjcOwSu0B48eFR76fqlxwXAsMacYlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a71c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/RTG/RTG_1179881.jpeg

172.67.184.110

200 OK

14 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/RTG/RTG_1179881.jpeg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 178x178, components 3\012- data
Size
14 kB (13623 bytes)
Hash
bd824024b973f6edd2608025787a6da2
1df243d1ee1a3866e6f3667e4b003bdde192420b
cc787e3106ca1fe51910638dbdc77a8f7be62e3d12b485310e57d31208f53ec1

HTTP Headers

GET /Image/Game/Vendors/RTG/RTG_1179881.jpeg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/jpeg
content-length: 13623
last-modified: Wed, 13 Nov 2019 06:33:46 GMT
etag: "9336d4dec99d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XGwRmRNkEwBrOVr%2FFp1j5HKGL0r3nMPDwMQ9EDnChjul3esU1hk%2BdVDY0Jc8SnTjFiqY%2BIRVvpP687TA9JZPVKiaTF4MBRMuMG57h2v4ksB9bduAJl%2Ff0E%2FzCih%2B6ORuVP19XiWHKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/PT_QRCode.png

172.67.184.110

200 OK

3.7 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/PT_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3687 bytes)
Hash
9ae496e9f8b4d16c04d86a4234dfcaf9
34b18ba1e67ad85e52b6ce0b2ad94176ca4027e2
375ba09f85441f953b97f22a3426947b6dd79b4c6cc4eaa61cd2d365bac4bffd

HTTP Headers

GET /Image/AppDownload/QRCode/PT_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3687
last-modified: Tue, 28 Apr 2020 04:56:41 GMT
etag: "dd414068191dd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sWiKpq7mP0sFI48eRl7buGjeU%2FvbIzun3VkJvWPYWvS6IzzkCqE1ZcKFKwQT5awwI%2Bh0wvTyhrGg6K4Q69r2JpNZwnuGlv5591te8PAhQEzHgn%2FfoV%2F5SWG9T4dkVjCWsXUNja1FPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8598f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/pc_download.png

172.67.184.110

200 OK

1.2 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/pc_download.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 204 x 150, 8-bit colormap, non-interlaced\012- data
Size
1.2 kB (1156 bytes)
Hash
cd33d74c173286eb93751613d38b6107
1eefb2b53f87210133edc3a96432d13e0d1bb427
7fcc3dab01da3416a4c3d2ad8104bcdd965eb62897b10502089e466e5b3bf9f4

HTTP Headers

GET /Image/AppDownload/pc_download.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 1156
last-modified: Mon, 17 Aug 2020 05:47:28 GMT
etag: "a6f340e45974d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s3F9cEyMxOb03jw0jU38jf6ADJ%2FCWfj9aEAgyOTxwRysCRauuWzicDwO1TAveMBRXa9TH5U%2FLFKDXN1cYY4QbpF1M7XxfryvUeRSSgdPHvo6wiHqL6Y2KYmZyq%2FUBO%2Fxd17AsJaZYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859901c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/IDN_Android_QRCode.png

172.67.184.110

200 OK

3.8 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/IDN_Android_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3775 bytes)
Hash
f353e93c1ba230ce6b14de0ede05316a
f384414002c26f90ceeb63bb04ba23769547475c
6f8047bad1f3853a42155825bed0c07e5468431e875baa8205b8f3201f050460

HTTP Headers

GET /Image/AppDownload/QRCode/IDN_Android_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3775
last-modified: Tue, 15 Dec 2020 05:24:19 GMT
etag: "68e5ad89a2d2d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C%2F1dj5Hn7PeuYu5mMEa7MrfOBwuY1BQJpyIzgi2SLrMlDmsnatHZAPoKUSSDxLSA9lULWNFGZIzs7fTGHPVbyFzTZrsTDzVqa16vhc2mg%2BrfVsKR36tncn62LDbFGlaUlMfPFUpfdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a01c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/fg-logo.png

172.67.184.110

200 OK

5.4 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/fg-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 526 x 190, 8-bit/color RGBA, non-interlaced\012- data
Size
5.4 kB (5362 bytes)
Hash
981b5b623e8c560c37f7875a37bdb8d7
7f4f3f7828521851c125c221779399b3d5bc1d6f
52dd439b72bba77469297467d256af0c7e75a5256b915cb688f8ffe65bb7f21c

HTTP Headers

GET /Image/Branding/Logo/fg-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 5362
last-modified: Mon, 02 Dec 2019 01:43:55 GMT
etag: "1e932ef5b1a8d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j7jBYGwJ4CRDKcEAyEyy7LSM2Uq%2F%2FDfJMDqxUgSNg%2Bk7xVH7mSr%2Fbiy1gQ%2BCNlspycRulbrWP%2BsOENykCBcpAaG%2Fu2kLQ0B3OrODOKEkaKmfS281s4s8SFSC7zvjqBqEWrNqN0ZLCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597b1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/DG_Android_QRCode.png

172.67.184.110

200 OK

3.7 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/DG_Android_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.7 kB (3743 bytes)
Hash
3253ded4839a6b82778a9e6f79a56354
0711ca04fb21c3e80a94fda4ea8d7e61534f1f7a
968c0bec6627502d345a834b75e6d9205a3676dba667fac735097cdb1b545261

HTTP Headers

GET /Image/AppDownload/QRCode/DG_Android_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3743
last-modified: Fri, 05 Feb 2021 06:48:53 GMT
etag: "5f93f88afbd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pk4WNB%2Bh74UbLb%2BPsfIu0iaT1j3X%2BTi%2BlUzjRRJYAdBfmMcCd1bhH%2FmL5lCJ9yEudv1GeqritS7p2RX8F9oD3MYq%2BL5mIxSrFPw%2BQQgj5ZQ1CC119%2B1h9Z1y%2B%2FvnXZlKXWlIIGZsSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a61c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/QRCode/IDN_IOS_QRCode.png

172.67.184.110

200 OK

3.6 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/QRCode/IDN_IOS_QRCode.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
3.6 kB (3567 bytes)
Hash
28e4d1db21eda5adf9e4e8b3a89ac9a1
1beb8ded4ad3345d2abf5a25a7f68f7d56bde184
aa363336a7b5041c617bd7537f48bdc998aa06b4cd27d904b728a48ef86f76aa

HTTP Headers

GET /Image/AppDownload/QRCode/IDN_IOS_QRCode.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 3567
last-modified: Tue, 15 Dec 2020 05:27:09 GMT
etag: "75549efa2d2d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MIa6IoQFiRCuyvC0MDkWXC%2BFD%2FKDLV%2FsazYAiaOYPHMC7k2w5I8ViCmZLYgwviyUMO14mSTzw4ATcdzG5ojmNRkZbL1Ny%2FFUGT%2BYv6llM6tEf2948pVCCh6DqFoi6J8Gpdc8WT8%2Fvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a31c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/video_depositLocal.png

172.67.184.110

200 OK

8.5 kB

URL HTTP/2
static.r7content.com/Image/Home/video_depositLocal.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 201 x 112, 8-bit/color RGB, non-interlaced\012- data
Size
8.5 kB (8455 bytes)
Hash
680cc11f66ecb672aaa0a1b7982eae3e
812852978cdc1b98920dc0de00891d78c2b3b771
1cbbc1b0c56d86bd3d33ac6f53818c6d9729915b3244e37f14e35fc85e5428d1

HTTP Headers

GET /Image/Home/video_depositLocal.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 8455
last-modified: Wed, 18 Dec 2019 06:39:03 GMT
etag: "cd81dad66db5d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IrHVyKrB2DJsXKAESG5IuLF8YacWOgGRmgFbnJu5KCBi2mx7RD6BTvBn5Dr4n%2FcX%2BuZrOFf2KW1Urk24FuJKdWikz1Y7jiqkBlnsY0e9Zz2rIBSGSfAPsBx8oQXbQAM4EVzF523jdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c96ae71c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Footer/r77pay_logo.png

172.67.184.110

200 OK

13 kB

URL HTTP/2
static.r7content.com/Image/Home/Footer/r77pay_logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 1000 x 500, 8-bit colormap, non-interlaced\012- data
Size
13 kB (12947 bytes)
Hash
2d1a3b777f25804ffe3a2b6fcd8b3829
41d9a3b751c7fd89efe97b2ed0e100127bb730c4
741b88f1507b8ef68e3ba3948e6dfd6ebbd81150d701fa0ef20a114cd86df017

HTTP Headers

GET /Image/Home/Footer/r77pay_logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 12947
last-modified: Tue, 05 Jan 2021 01:19:38 GMT
etag: "071c5d50e3d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ndm4E88xeAN%2BOvIqPUO%2FcrX6xqZ67YAGXq6MIgsEbe9kbIv%2FRLCXMzmffEk7aoATlJ%2FyqvPbg%2Fy5iKX46LJ3b79ByEyKxzBF1b6AFKpQbkhhPA8seANVqsueWJ%2BggbWVcNSfkZl8aQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c97af31c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Footer/pagco_logo.png

172.67.184.110

200 OK

1.9 kB

URL HTTP/2
static.r7content.com/Image/Home/Footer/pagco_logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 58 x 58, 8-bit colormap, non-interlaced\012- data
Size
1.9 kB (1941 bytes)
Hash
4310379eef4dea445908b3d8ae0bd6a9
dbf2dae6871e47d57634ca5f22feff9ea7399fba
af09e8dfb6ba041941d237d2db010c9399ff873eb5f48fe56826e7870a1ee23c

HTTP Headers

GET /Image/Home/Footer/pagco_logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 1941
last-modified: Fri, 14 Aug 2020 01:14:36 GMT
etag: "0e64746d871d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ktRx8IduqOYfsbDFmv8mjdWhKIlulPV8cIahv%2Br218lgHa%2BIwBzQwbmWDXft4GXXNfG7cL1cD0U09G27ZU4C3zbpEiKbLyNPNTLqAYcn%2FS93kmXB5LHq7zjgey%2BVkwlf1CRgLqfag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c97af51c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Footer/youtube.png

172.67.184.110

200 OK

356 B

URL HTTP/2
static.r7content.com/Image/Home/Footer/youtube.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 46 x 33, 8-bit colormap, non-interlaced\012- data
Size
356 B (356 bytes)
Hash
960056b188de8c140676a873112cbb5a
622ab17f157b7c3b443646a5a433e702faab430f
85431565d621e9379a1b66bd6a812754a7b0e718e64ae6b1bbd49675ba8b8d00

HTTP Headers

GET /Image/Home/Footer/youtube.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 356
last-modified: Fri, 14 Aug 2020 01:14:36 GMT
etag: "0e64746d871d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qcqrHJDfaROhkEmx0uI3paaQ7SsBDsx4ThUVLbCKGIYISSEmhe%2F9awcRJIOl5Nx5p5CYOKLQkuiG8qbaCtDmI9Ew0bjd%2FgYH3Avy6PM7nI2yjTiwuNIa13HmzCjwBQPot51Lh3j0tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c97af71c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/24_7.png

172.67.184.110

200 OK

13 kB

URL HTTP/2
static.r7content.com/Image/Home/24_7.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 284 x 252, 8-bit colormap, non-interlaced\012- data
Size
13 kB (13234 bytes)
Hash
8986d77f642c841e58ff7416e470d43d
9d90de7e0a5ed07ffa534f932c046dc06dd06c43
fb3e13063fb645cede635e44ba5ec574c3f2bcca2400cf4e842d226e04c5272a

HTTP Headers

GET /Image/Home/24_7.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 13234
last-modified: Tue, 05 Jan 2021 01:16:16 GMT
etag: "0b05e5d0e3d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tONJrnhyIxd6kePgpA9AWaankzM1x9zF3uErWnK7Bq5AKwS87tMQgMzA2yWpOGXOaHOFfEo0MXnBwNXT7Z5mfLmSEPqWnwmzTby6O4j4ZgcSG%2FCUExZxNwutww2sk6JHDh8fktArAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c96af11c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Footer/facebook.png

172.67.184.110

200 OK

240 B

URL HTTP/2
static.r7content.com/Image/Home/Footer/facebook.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 40 x 40, 4-bit colormap, non-interlaced\012- data
Size
240 B (240 bytes)
Hash
742733a88544ad6c3478af6f28b9bf4c
b6e1e04fa96412dcc52efc7da6258a6342a86556
96d765a7d18f8c6293bb50fa3fa396ee40766c624a8281d372c3073648be71df

HTTP Headers

GET /Image/Home/Footer/facebook.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 240
last-modified: Fri, 14 Aug 2020 01:14:36 GMT
etag: "0e64746d871d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kfMvdQEY%2F8BQTP3UtFgjZYDjJs1RhjzrS4wMK6GTEwL53Y5lLXhCdb7NjknuMDL34md3Toink0pS0e3OqG2fmwy2%2BkqKtB4CA%2F7yue%2BdS31p5A5%2FxozinXp3YaPDg7KH0NDF1k1lIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c97af81c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/video_withdraw.png

172.67.184.110

200 OK

9.0 kB

URL HTTP/2
static.r7content.com/Image/Home/video_withdraw.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 201 x 114, 8-bit/color RGB, non-interlaced\012- data
Size
9.0 kB (9025 bytes)
Hash
c4ad36420896ebba9a14056bb67043eb
e87ce516184a6d1005368bc0ab106f7a411a1f1c
94077b538708099e06526313c76a97ea78009293bf19d7c0c7b30d68f810ce71

HTTP Headers

GET /Image/Home/video_withdraw.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 9025
last-modified: Wed, 18 Dec 2019 06:39:02 GMT
etag: "c09f4fd66db5d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8FZyubRry9aKPGybFCYRRSD%2B98%2BachS5yRBJt3WR3InFi6PULz4WELWOT6mTtoBV%2BTqU6UvKB4pG03ylT9Qt3f1W1XAtg7xzumUW%2FGNGzwXbvdjIGfIyOzFH%2BWDf9X%2BAp0%2FUZ%2BgutA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c96aec1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/BS/ttb.jpg

172.67.184.110

200 OK

44 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/BS/ttb.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 366x416, components 3\012- data
Size
44 kB (44508 bytes)
Hash
161f632f84fd9a398e36221bcde0c248
826a011104173fd628083e87f2c3a19653afe589
4474c9e12ee15656b53b6c3474106332647d144073aa8f1a96879f29bb657529

HTTP Headers

GET /Image/Game/Vendors/BS/ttb.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/jpeg
content-length: 44508
last-modified: Wed, 13 Nov 2019 03:56:16 GMT
etag: "030554cd699d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lpxtPGi0BqjyEyMTfVW6wP7Yp90BBORtk2UZLNxDp0JH4RyAPqAosnbc9%2BjvxZJdfqSSgSbdKZI6NKQLk62mxDfapZW%2FXAi0CGKgZcWn4JqfyjubMTIqYyLm4ACgVWq1AQ1TJ8n%2Ffw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849611c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/promotion-casinorebate.png

172.67.184.110

200 OK

40 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/promotion-casinorebate.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 426 x 174, 8-bit colormap, non-interlaced\012- data
Size
40 kB (40521 bytes)
Hash
469ba839f9c20ca9b1eb344bed3be7c7
324274ea7ec3b5039db4f7f4e253275ee149c078
c9c2d4a1df88cbf466af0117d945d5d15791649e69f53b8d11a427361ea65c20

HTTP Headers

GET /Image/Home/Grid/promotion-casinorebate.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 40521
last-modified: Tue, 20 Oct 2020 02:28:14 GMT
etag: "0734aa988a6d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ivf7nn6Zzpsy9ZIxF9WKs3mPjJSLNxR2soVPATMzUAkM2bHMJKs9q%2FYaSD5IOItKRocYTSEVZwNfv%2BgiR7tKCAgjNztaLtUlhVTRdqkb%2BiztHVdDxToCcZi21u2T5KHsUAlfnWttdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8598a1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs5joker.png

172.67.184.110

200 OK

36 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs5joker.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit colormap, non-interlaced\012- data
Size
36 kB (35502 bytes)
Hash
44febb238e6d73e4f88a049672938314
c0f7276685e931222b042e49724c4fb47ae7a98b
f3d36fceaf8448a059496b98836522fe36c2da6564416501b15a70ba51a12444

HTTP Headers

GET /Image/Game/Vendors/PP/vs5joker.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 35502
last-modified: Fri, 15 Oct 2021 06:50:20 GMT
etag: "47fdceb90c1d71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FagJEse1bfOo9un1n6qPflxTDH3ukvW9pdB1E5uwHWBNL%2BYNCx6cFxZ8A1qahzl6zp3DwFcBXEALc4jk97S%2BsaSGTRdb2jbrW5AEAlDSri6HvTLyBnm9vf6UTCV%2BBlQpifPqE4Lpqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/HG/Fiery%20Hot.png

172.67.184.110

200 OK

21 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/HG/Fiery%20Hot.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 225 x 127, 8-bit colormap, non-interlaced\012- data
Size
21 kB (21390 bytes)
Hash
737bbbe93fe421b53b17160a6d188a38
1e023e8e677f04a68aec21dbba971074f64c4283
843f3c666ee2d7358cdb36e30fea0c8cc0a69bbac16c9dd3c3d2f7ea0d7ced9d

HTTP Headers

GET /Image/Game/Vendors/HG/Fiery%20Hot.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 21390
last-modified: Wed, 24 Jul 2019 21:38:10 GMT
etag: "0d92166842d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KxXQs%2FZyHscavqiRyBz%2FIM%2FHjfCGkOUaqKQ%2FLx44wA7BxqDqXdrMpzMGPqSBbNx7f8fdQrVuOKLBD1MPXFK%2BlzRiIIoEX%2FNCIgz0VhoH87RmzqRoQTnacefo7kc5W78lakM3lDjo6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859731c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-eb.png

172.67.184.110

200 OK

27 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-eb.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
27 kB (27323 bytes)
Hash
26db90db4ff0ac650be9b3780a86e81c
232296e35a34464fdb7e6b3945dd3a17993c3202
36f9633cff37ea7218c7f6a06fc8a01a598f547d2dafdab5552e787ed49923f3

HTTP Headers

GET /Image/AppDownload/download-eb.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 27323
last-modified: Fri, 14 Aug 2020 01:12:46 GMT
etag: "03bb74d871d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QtMcJKBWLHJnlhncbQmaN0%2Fat%2Bs32lrXtjg33ek5JcZruhsyf8R99q4b0jXybLkWvPL3WIdFj1SoOY13D5iNXziDXcT7vzu5d%2B9NCs59ls022UvnG716o7qWIYGqZNhJ7bEkCnmguw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859911c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vswayslions.png

172.67.184.110

200 OK

34 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vswayslions.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
34 kB (34221 bytes)
Hash
57abb36e2c7c7a2f9f6caee1a55d953c
cbd6404f22571cfcd09c7ad8f1294d75b974e3b5
63fcb7d5cf2ac607ab6522a3f9335b74db22571ed3aa5d43bd66665fa0d50b5d

HTTP Headers

GET /Image/Game/Vendors/PP/vswayslions.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 34221
last-modified: Wed, 23 Jun 2021 06:05:55 GMT
etag: "8063dfd3f567d71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rQjOi4OoMLnLz4cwuyu0xws%2BJ43eqXB4ANmgGBBJlbkdlVI4twRDuN1BllhcLl6Vgl6%2Fzoy4MdPZoTv4nc6oJi0o%2FgQMwpUDkkneZuEj2Mgnc9ZyI9pYYDDwXP2APAQ35ZzoCy6%2FrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8495f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-gpi.png

172.67.184.110

200 OK

36 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-gpi.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
36 kB (35950 bytes)
Hash
8fbcdd760465dbf9ddda34cc65f02cf9
aa4b2780279d57bb478e16df64e71cdd8690c3d1
66df27fe6b1ed9f505ef375891df385188538b3be2ed40fad49fbdaf5446bb92

HTTP Headers

GET /Image/AppDownload/download-gpi.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 35950
last-modified: Fri, 09 Oct 2020 01:58:54 GMT
etag: "083b4bddf9dd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rSn3i%2Fl3c1eOteRE6FAjGv4udCXxZ7UUBbD9zHhBXoMJ1RE%2Fl14CUj1pM7UldmQPk21mlWs39%2BW4DCYN4JuL8%2BQaf6EJjStaEB9yzlYFoU9j3BmXR7zWAcrO3hc4kSxPHYrgUtYz%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8699b1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs20xmascarol.png

172.67.184.110

200 OK

28 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs20xmascarol.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
28 kB (28479 bytes)
Hash
8bb89bf5ddd5ffbc8fd3267f5b6c7a5f
fe01fa07c7389fa54d9a41d6882fa64ba44207e3
b14c0f4711fb33c0877207817326594f309fa1b850c2dd853d0a682ee236b1ce

HTTP Headers

GET /Image/Game/Vendors/PP/vs20xmascarol.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 28479
last-modified: Wed, 18 Nov 2020 04:38:54 GMT
etag: "04346b864bdd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ot5KUDVk%2BejMtv5FB4Grats5TZMjRmdUhsozB9xMXT8ahfolVOSR59WcLUWav5yo9V%2BqUnu43RfZ9h6hTG9yEwAS41qtijCBZnDmubEavfd%2FM2xBVfGDdQM2RLHqI5qVQlj2CPg9cg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859801c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-hg.png

172.67.184.110

200 OK

41 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-hg.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
41 kB (40739 bytes)
Hash
65b75cf796bec2ecc57e3fc5c690f8c2
502fb274664e6775015a9daee59207b6b98b4b09
4a2d3164c685eaece4b5f329b8ec37b8c58ed3dd0acfe6a85d62a567326daf8a

HTTP Headers

GET /Image/AppDownload/download-hg.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 40739
last-modified: Fri, 14 Aug 2020 01:12:46 GMT
etag: "03bb74d871d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JgRH1QwZdjNH51eSzJPL30jGUPscTqjgbuuNRW0bqxrSjyEIUIFi83NsEiVuPKivdJeAogaQxxP9eM5ecXAhkeyWDuw5u8wfy%2FzmWbWR97c8xPI1p4%2FlDMqLRIZwu6EY1Z8KdHS6XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859941c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-idn.png

172.67.184.110

200 OK

27 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-idn.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
27 kB (26579 bytes)
Hash
27d9bf516bbcc57944c0460268acd54c
a099c8a0868cfe549ae97b2ef78dc7f3348033c6
3fe3c0d68e10e00c8b53e8244fe81a1b605e68c6577b9fab386e754716598c54

HTTP Headers

GET /Image/AppDownload/download-idn.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 26579
last-modified: Sun, 20 Dec 2020 21:42:02 GMT
etag: "0b197f318d7d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zvuZInrfP%2FsYFBXOf7RalNIECyklMwTv94DX2HiAj1LWF4U51oWFMky%2F8XzZ6SakWiwzzmVs1kTYtKF2xqfsJUNkF8LIfN5k5X2klltzkloDV%2FeOs2v9kCBq09ygmQPMsFXbbdBc6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8699f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/bbin-logo.png

172.67.184.110

200 OK

17 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/bbin-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 409 x 233, 8-bit/color RGBA, non-interlaced\012- data
Size
17 kB (17189 bytes)
Hash
910d7e191f4e408baf7a6bee1c2a991f
45979af38100b799208c2bed9352bd1755f9fb01
2bb02fa03329c1965a03f93f56b5f8cfe63075a824e66f0fbf43b20c3b423f2d

HTTP Headers

GET /Image/Branding/Logo/bbin-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 17189
last-modified: Wed, 11 Dec 2019 09:46:11 GMT
etag: "5722ed27b0d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=40sKRORurJDy1whoasCv7hD1Ip51bM%2BxQJYswit6qGid9GOjBp2iNbAK8zvsg5LDZwEuUUZF6d7ngVGjooR%2B365rjFyLXKvRRzlWoCd6aqze5xI1Apg7iBXkq9g3kUH6Y%2FZ4YgCgRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8596c1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs20olympgate.png

172.67.184.110

200 OK

27 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs20olympgate.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
27 kB (26698 bytes)
Hash
4c96a6d7414c28a843a50f6b499c7b6a
c7126636b7facfbc7dc9e6a7bfe111fe3c3fd920
8759182fd3a4d732d9a22ea993bb84af3046b3c7bb86854a96500d1ab46b5e56

HTTP Headers

GET /Image/Game/Vendors/PP/vs20olympgate.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 26698
last-modified: Wed, 24 Mar 2021 04:40:14 GMT
etag: "0cb1c86720d71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sy2thpBVLEd4yb3jE%2FkkMVcsFJveV1MWR1q8I6AWdBP4ldDvGyFDpHMOPXv%2BJn%2BeVH09GRVKx1wJ4ypuKqkR8GuyCgtc6EgpLTYjl795wq%2BoXrsT6dm%2FThu9nnjCLcJk%2BEWUCbYnCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597c1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/rtg-logo.png

172.67.184.110

200 OK

22 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/rtg-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 185 x 59, 8-bit/color RGBA, non-interlaced\012- data
Size
22 kB (22424 bytes)
Hash
53eed2242e51bcdfda53c0d64b7e4576
8e8d467da64d0b16d7c5fc6a27511a60589e08a8
d57c77608ed07705a8c52bbd4a23fda846f506d1d06300e03f94b84eb3b22096

HTTP Headers

GET /Image/Branding/Logo/rtg-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 22424
last-modified: Fri, 13 Dec 2019 08:33:47 GMT
etag: "92ffed990b1d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cU6Hd40lrvOcdO2zruxs1ZoEpXD2BrkIVFGu7WqBj7qvz44M9CARjshr9TUO%2BF34loICcKSU2bpkLoA6Qzgtb75IjnxNjH%2F3np6GwvMLQCkWWy8VGw%2Bsfiqk745tLqKk6wN7XiJ0mA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597e1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/qt-logo.png

172.67.184.110

200 OK

31 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/qt-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 800 x 267, 8-bit/color RGBA, non-interlaced\012- data
Size
31 kB (31000 bytes)
Hash
4fdf42d2a5aca61cb0a8165c290cbd08
ecef6f97c2219ccd76ee975a7d8c62c9cfacfaaa
c03cb22c42caec93aa5d92d0221d107bcaa34422b29d46c9e8618b1268b04979

HTTP Headers

GET /Image/Branding/Logo/qt-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 31000
last-modified: Fri, 21 Feb 2020 08:49:03 GMT
etag: "e279ec493e8d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=270pkgNgc3G0YEukWgK6yMSCpSV9f%2F1fzdz4Y9JjRN0pkP1xrQiLIwE81jb2qiF%2FPAgkcvoP4BWGecEAoXZ6sg1FRDVyglZ8vCaHBH8GyQKnEzI3vddyCeHx%2Bavx6MeCv8hPwqEqVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8596e1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs20bonzgold.png

172.67.184.110

200 OK

27 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs20bonzgold.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
27 kB (26595 bytes)
Hash
57ffab1748601867e7a0b5eaab66bed1
c9da6e180d4e6c321daabd2161f80b6fd9374151
e9f3c59f741af42b4e7fdbf9712bee7c16852bbdd8f0ae5faf0393fb838efe37

HTTP Headers

GET /Image/Game/Vendors/PP/vs20bonzgold.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 26595
last-modified: Thu, 03 Dec 2020 08:20:12 GMT
etag: "086c61e4dc9d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2Bicg5BBSxfoHhO0%2BGljPoj1WPh%2FoXlX4h3RqM5KX%2BPPXtjAWQADE%2BbPhxTK4Pg6Ignmv38WaiTReNB5tSxVmLLqe065%2BxT2lmoBEAHWUW8yefH6xsXE2sigERzZ%2BtJfmwEjkAZbsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859771c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vswaysbufking.png

172.67.184.110

200 OK

28 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vswaysbufking.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
28 kB (27960 bytes)
Hash
36d1163cfba0efd7bfecd5be70b29e2f
abd06263c32c04aa2e74f6bc6337b38033635429
22e9819757982e7afd550c0c3b8241ce2f7a271034a53fac1864c72e154b8d75

HTTP Headers

GET /Image/Game/Vendors/PP/vswaysbufking.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 27960
last-modified: Wed, 01 Sep 2021 09:49:02 GMT
etag: "0fbf98169fd71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NS%2B7eAb89gqwi3K8F6kX91g9VBcZhOhS3Hi3E3Xk3cP7df2RrQXqG3qa23q9YMZ0mWMg%2BvOANk5wb2vvGF73khL5zabsvHNhCCnuTEE%2F9pmfVbrFoxvw27wllndE6GqmS0iKk2%2FnqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859811c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/GPI/GeniesLuckthumbnailEN.png

172.67.184.110

200 OK

18 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/GPI/GeniesLuckthumbnailEN.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 219 x 224, 8-bit colormap, non-interlaced\012- data
Size
18 kB (17956 bytes)
Hash
a26b09bb1858b587499958d63da4e7f1
4d7abe697cb8737af69d544929c820e5f0eb8d9c
72ee4f9e0c104441d3a8804c87faf9a166366141e6e8db38ecbc57cfb0a39760

HTTP Headers

GET /Image/Game/Vendors/GPI/GeniesLuckthumbnailEN.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 17956
last-modified: Fri, 15 Mar 2019 06:58:38 GMT
etag: "f5881b84fcdad41:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=po2AV2a70nZS0s%2BXgYFM0tLxnrDrfGYurCJMHQW6yJ8vcBOVE0dP2NioTYplzF%2FKIqoK%2FQnvTTgKtMCsdC0INSdSM2wpmf20yRr2z3RLxbvkV%2BUJurjE8c8HTguWgFuO1bTOOLJ5IQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849651c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/BBIN/5043.png

172.67.184.110

200 OK

20 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/BBIN/5043.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 220 x 162, 8-bit colormap, non-interlaced\012- data
Size
20 kB (20203 bytes)
Hash
8ba55542011ec53104efeaf22ffb3056
94888f248ffd771d24f15d8fbff9352a9431f637
fb6ba1015690c6c033478c47f62e93c9c515301c7484c8d1e523b18f396569c5

HTTP Headers

GET /Image/Game/Vendors/BBIN/5043.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 20203
last-modified: Mon, 30 Sep 2019 03:37:00 GMT
etag: "09620514077d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ea1clUAs6oDISVCGyYYu7RN8ZChUuUgy96iFgr2jnZPva7qH15p1xqdAOFI9lWwUtiF2DBvrAdmLrT6Jz6uVZPcgzhukRJBoOxqFM1xbmzmOAl8QFqLOn%2Bsoq4zEkrjHfvrSLE0gaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8596a1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs243fortune.png

172.67.184.110

200 OK

45 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs243fortune.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit colormap, non-interlaced\012- data
Size
45 kB (45331 bytes)
Hash
7e2a4c352d4aec1df9c7ebeaf5428e7a
7c12a44cc3e4add918ac629ffd027432db18ea54
f740c8d24aa899424f60e5f805ec282658aa4e9489533af38a6fb53f46c4768d

HTTP Headers

GET /Image/Game/Vendors/PP/vs243fortune.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 45331
last-modified: Mon, 11 Oct 2021 23:17:42 GMT
etag: "06fc230f6bed71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZwuEf9tF1zbvb6JhVg679QSKs2WhGlZT6ki%2B4vBzr%2BjFhBgnB5%2FYGotYcgJhUDGuaaOcRYzU%2BGm%2Fr3T7m%2BmijjdpZw7rG04iRFlbIWevFrwRqMT0aK7MsZ4Vu1CKOK%2FNfSFrRSiVHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859861c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Branding/Logo/mg-logo.png

172.67.184.110

200 OK

22 kB

URL HTTP/2
static.r7content.com/Image/Branding/Logo/mg-logo.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 619 x 165, 8-bit/color RGBA, non-interlaced\012- data
Size
22 kB (21458 bytes)
Hash
4be07a742a05662b1698641da725ec2f
3714bf56597bcc85fa62ddf876fac79e142138ee
31273528f8bd9b5fd0b3518d5c1239139dadb9255ab58eb25b8a9b15b63e00d6

HTTP Headers

GET /Image/Branding/Logo/mg-logo.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 21458
last-modified: Mon, 25 Nov 2019 02:21:32 GMT
etag: "597c99d37a3d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WS%2B4j83%2F3VBO9lOkcKjN4PUNHlq8MdwEYvbvj%2F6b2Q4NiWVQf7oluVw8UhZov5d428QUJqU6RyaNjj5ucKv8DaJYS24pZoLufsh636XA%2BoZXPpYUTbNZX%2FIBVfrG0HRnZD1R27n%2FVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859711c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vswaysmadame.png

172.67.184.110

200 OK

32 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vswaysmadame.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
32 kB (31581 bytes)
Hash
d0f4442413400544439f42cf971e0728
e55261f0807815cf88743ced331795dfadf00b81
f66cd9233b1753eba72b1bef8d3d9da6b8a53e6efd1b4101df3ff0a14e24d7d8

HTTP Headers

GET /Image/Game/Vendors/PP/vswaysmadame.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 31581
last-modified: Tue, 02 Feb 2021 05:12:09 GMT
etag: "801ac8f421f9d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MKaNDaiwIh4o5TtBUBjnJk4kgH2ewueeR%2FAn7SDZ%2B2Ky6hzKHFNfimNEGt17BICSSw8P8dqI9vrksXIYfKua%2FsaWcMT17LY%2B15XbJ1MsE9UZsRLdwbc5GpmkuuGh5zP1YcLhlcWAzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859671c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-pt.png

172.67.184.110

200 OK

40 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-pt.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
40 kB (39981 bytes)
Hash
76f21d1fb2c6c8483e4333e0102845f5
0f154472a974c1398722cb19b6d7acade2747c04
3a3c863b38a0eba67c9e4a20c9f370e548c3d9693cad984bb1d0d4ab5f13a5f6

HTTP Headers

GET /Image/AppDownload/download-pt.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 39981
last-modified: Mon, 12 Oct 2020 03:56:45 GMT
etag: "4334e2b34ba0d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGmkNdWtP%2BBrwheDn6xCdPO%2FH4y1FR6GzD%2BTWhw%2FC%2FuSGVDsPbStYDQP3zP2xb8M5tuzYxlc4uNkq53wLcFtbgIoKg2w1Mf413Hy3%2BvQMr6Q6A4jjoL9MF57yvIDMMhdORT9a6cogw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8598e1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-qt.png

172.67.184.110

200 OK

34 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-qt.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
34 kB (33775 bytes)
Hash
8bc972184a45a773b941c3700a5a9fdc
e0e3ab994cfadd25f6c6640183ac4b4f14447506
00877573a756bacaa6c2a4b87737605aba00aded1b6bd1b5416dc1fdbb656a50

HTTP Headers

GET /Image/AppDownload/download-qt.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 33775
last-modified: Fri, 09 Oct 2020 01:58:54 GMT
etag: "083b4bddf9dd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v3Ft3TGdscsMWuiqsjjKANBKhrC%2BX1r9I3FrYXjN9yYS%2Bjbu8UyEuOtSInesCVqQ2VVgwHsqLTAG60ADpVc5YI2E0cx3caHC1gyAZfHjSD3XO%2BViLcxp58otqH9Urmyy42HIsUkscg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869991c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/MG/BTN_TwistedCircus1.png

172.67.184.110

200 OK

19 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/MG/BTN_TwistedCircus1.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 291 x 136, 8-bit colormap, non-interlaced\012- data
Size
19 kB (19072 bytes)
Hash
b051474a4bc3c0929bb67a90732a8dfe
ee92d8fdbbf72350f39768c086565c06b216f6e9
611cf4fc64285531206fc89e2c0eaab02838af67652a5ae29fb025801fdcc0d8

HTTP Headers

GET /Image/Game/Vendors/MG/BTN_TwistedCircus1.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 19072
last-modified: Wed, 04 Sep 2019 07:06:20 GMT
etag: "a271941ef62d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uZsBS0BN3EOFZhpgYhS8qdleLjngpaPEUIVABqzgLBKcQ2LAqHp1YXiOpz0mVJ4VgWVlAc31GmuMCuImD%2B458B0P3Y7oGkHVbeUf%2BiYs%2FMq7W6yt8qucl2LZ%2FY9M5foqgouzD%2BlZNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859701c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-bbin.png

172.67.184.110

200 OK

29 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-bbin.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
29 kB (28967 bytes)
Hash
277e2172684bd7e1033ab31fa0bac4ff
14df163aeef7e899addbaf4ecada3d7e0b9ab3d3
47192321757b67fd6407354ad30cd90a8d4e13309e361bd1763e2585fbee757e

HTTP Headers

GET /Image/AppDownload/download-bbin.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 28967
last-modified: Mon, 12 Oct 2020 03:56:44 GMT
etag: "d114ab34ba0d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ub0wKJSJ64Yvk6CdD8gO3oePGs5d34R2Rl4pW8RxphUZDvNsj6uAsodJ%2BQYzZu4U%2FfpEjeK3kK4rVh3LddydHT4XwArcInUyJh088tI0uwym%2FZNYqO74EucQmuEqn5Al276v29w7eQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869981c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/AppDownload/download-dg.png

172.67.184.110

200 OK

34 kB

URL HTTP/2
static.r7content.com/Image/AppDownload/download-dg.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 268 x 268, 8-bit colormap, non-interlaced\012- data
Size
34 kB (33467 bytes)
Hash
2579ba3665d64b594a3b442acfa85f50
6558e5a8b7781587af1809102970e86b08163033
88e39df67705dbbc53c5cb94f3e759c8a6836b17af4a9b24139702375c709686

HTTP Headers

GET /Image/AppDownload/download-dg.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/png
content-length: 33467
last-modified: Mon, 08 Feb 2021 01:38:11 GMT
etag: "53c1befbbfdd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ayAZhGD4dgu5lzGp3Ic%2B%2BKhS6YXw5EvDGemyTZIpTSd0gmE8sL%2FIl5S82fm%2FaRydCNsFIetVwQAsbWvJHJ8ZWI7GWHKOTwA2uQBa9olFxjlPJhn6kTwTYwgnPc3PPwwDHdEj5grnhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a51c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-cashfish-02.jpg

172.67.184.110

200 OK

74 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-cashfish-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
74 kB (74036 bytes)
Hash
796f229875c9f90954fa6a86c4f0ecfd
d0d62a86c5e186c8ce90489d067aa2ac37bf018b
2b03a5e5e821601fcda7ddcae0fc58a1bc17b09af943dc48ed498ab5b5ee2dfd

HTTP Headers

GET /Image/Home/Grid/game-cashfish-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 74036
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PeF0LzEVRUBpITrqddNIe74SRhzOzcQfkaYWLdn3yuS2hKnUCmOGX%2BYqZ3HwsMkRtTY7eCyc4okqqwui3T%2Fh%2BIq6Ye8M5N5uQP1lqNG%2Bn%2B1xJ243kh4Fa3qhy5qB%2FXIPTlnDmZVi4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849581c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-birdhunting-02.jpg

172.67.184.110

200 OK

57 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-birdhunting-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
57 kB (57207 bytes)
Hash
3bcc1574c427b17207e0680adf2813df
8a708bd5dee3f077c79a4d86d14f8ec70af23e3d
566f72f92e89f44287f2fef72199b0c459f4abda82116ce7d07225ddda70180c

HTTP Headers

GET /Image/Home/Grid/game-birdhunting-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 57207
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t0kvlZr6OYmOBQlqhMwK2ap4FjAD2uUzg3kdQ26drlNAGPlQ%2B3%2FM5f5PQLdLeo7MN2gJoEJeF9NpuCfywrJnGyi2SkxWkHa1HxR%2BXvqZTRrsUPTeoi9KszfQz%2BfE9zNs%2F%2F8NYJ18nQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849571c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-fishworld-02.jpg

172.67.184.110

200 OK

66 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-fishworld-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
66 kB (66479 bytes)
Hash
469e5050ca35313765a09ce0e30024c7
4473136b304c9cd17cf7e8885294d26388cbecfa
946142a23eb92f5bb199847bb0094e8399027bf22cdea38578eb7a21722fed49

HTTP Headers

GET /Image/Home/Grid/game-fishworld-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 66479
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yeFxm4NTOrSPD2mTJ%2BwAS3R5M6%2BY%2FhbwI6JvY3tCjVM3qJwbuoBYlyUaSnd8lrUgCUp3luDFEuupuaEBN2MPMepZm2GAG5y%2BF%2FE3L%2FhReOiaY6Drwtc2zUafd7isBRsqyudR4PPYmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849561c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/Casino/casino-ag.jpg

172.67.184.110

200 OK

81 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/Casino/casino-ag.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x282, components 3\012- data
Size
81 kB (81113 bytes)
Hash
0d0adfc56e6a9e803179bd807302dbd7
65a83dd62035b4bded30b17f77bf377a206fa0d0
b947e81462ad0a3b93432aa49cf5d51b6a0a4ddefaabb1e7c024f000710c6ae7

HTTP Headers

GET /Image/Home/Grid/Casino/casino-ag.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 81113
last-modified: Tue, 05 Jan 2021 01:16:16 GMT
etag: "0b05e5d0e3d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V9uFt6bDrkeGPnFpe2zz9uaE9HrGBrQzr0EiMfkgz4sRj6%2FfhFYGg5u2mlS3IGOHx2kj%2BN27iV9lEEnu%2FUZgz8mQ7QNM8ggYPAsiUPVWRqxBt5KzSZMaglfb10f%2FaW%2Fsr4RSzgMJRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849591c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-fishgold-02.jpg

172.67.184.110

200 OK

62 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-fishgold-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
62 kB (62007 bytes)
Hash
ea546bea2a4fb6614799ad014851af90
e8d8698765b3dbcea3fc500f36ff5844ec78c544
ee5a09add0d55351a663f5f98226ea3401fe819d492a197145ba038e649fc18b

HTTP Headers

GET /Image/Home/Grid/game-fishgold-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 62007
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=woWIea3Yp9DLzIcsFBhhCuFaWOl9XpdRL6%2Bt1gd7t4Qbb7Dz1JvrIXBeUjOlFnHEghPhY87yOSV9HvSVL4vY1Uvn2mh1z3iPiDVQTpnt%2F6k6IyKMkqfqd68n0kHS%2BWyASN%2BOQGbWFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849531c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/promotion-sportrebate.png

172.67.184.110

200 OK

49 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/promotion-sportrebate.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 426 x 174, 8-bit colormap, non-interlaced\012- data
Size
49 kB (49115 bytes)
Hash
597e2b102c00607ff663e13aa487476a
77b2709c3ef41a89e16f7d071fc109beba5135ed
0d1b88008ddd72cdb199419572d285b29cb36e483a3a8d98bed37567348a1f76

HTTP Headers

GET /Image/Home/Grid/promotion-sportrebate.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 49115
last-modified: Tue, 20 Oct 2020 02:28:14 GMT
etag: "0734aa988a6d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dAoYo8%2FYeqOwb6erqgprGp%2B4knyzmS8UqM0IgQXlC2IxJ2hjRy8docRwPPM8VdJwm8j%2Fa77VwhiAkyaIwPwcnzB3VAgCakzEg1kBg1OjH8fFCdXOGjxGcdtDx%2FHsWDjoBVKREAKB%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8598c1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-fishjoy-02.jpg

172.67.184.110

200 OK

59 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-fishjoy-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
59 kB (58860 bytes)
Hash
1a429a58468211f361b7212550e4d6eb
9cefcaebc0666912bd457235152c92da95c73013
850428d1c7aba9a515968e2c52e38c1b86deda60fe6eaa20095944eb33f0246a

HTTP Headers

GET /Image/Home/Grid/game-fishjoy-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 58860
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7n%2FP3gRRvuL5o3qH2OdxYfc6i0gl5ugtPTCmcMgk4RC0wqfhCTFkQ1zLhywVmdy0C0Eenkvhlt2Vppb6hk5IYPwdIcHYSTnUypsReDQyfp4JrBSex3Uv6SfinaoMistZlQFHSkRADA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849551c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs5aztecgems.png

172.67.184.110

200 OK

54 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs5aztecgems.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit colormap, non-interlaced\012- data
Size
54 kB (53732 bytes)
Hash
731770cd660512ca12513d684ad9207a
34055d2d8e50a31794829f9487dad130f9a9be8f
47ea4ab4b2a7db39d0d62a9125ff522629825e21693abde7d48cce0a73a30c59

HTTP Headers

GET /Image/Game/Vendors/PP/vs5aztecgems.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 53732
last-modified: Mon, 11 Oct 2021 23:17:42 GMT
etag: "06fc230f6bed71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tUz7UpjvPytA0Ir1RP5YB77EzOkdB0kE7AWUPO8yvv6y4876kIOKNrNRDejQxcPq9BDWn8dyCC9dqbl2UYCcnQlmxY4viJDptuml4W9kgJYgSyTUdmOjmysv7WLEJh70UqjEssl7tQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859681c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs243lionsgold.png

172.67.184.110

200 OK

58 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs243lionsgold.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size
58 kB (57745 bytes)
Hash
a52aabdc0c2852c4f28cccd7edc3aaa4
6cef1f8d5c97afacf4a0cc601b803b7e1a850fb3
1b9772d18756073ee3a3c4eaefc2db92ad613d56d73341f2c8ed4699022b2b16

HTTP Headers

GET /Image/Game/Vendors/PP/vs243lionsgold.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 57745
last-modified: Mon, 11 Oct 2021 23:17:42 GMT
etag: "06fc230f6bed71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aVeu3NOh9oDZbD%2Fl4WVlb3Ke%2B6oUmA%2FIu82I7ogKoyIdRfk%2F6wDLXecUDUXu3ysqqydTzQYW6HPK1lEvfkt9Lj6crLR498D7y2OxjNrJGZBZymha7kBYCwwiB6vgbzGoxOvXFHjlCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859781c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/game-fishhunter-02.jpg

172.67.184.110

200 OK

64 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/game-fishhunter-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
64 kB (63936 bytes)
Hash
4673981e23045969a345e60e9424a61d
f6e71b69f28179b4cbc704148f4f3c902f19885b
1f98b9d01e0fe2fa160432cd34a543c78671907702a8f24580e9ef1bfe4b5083

HTTP Headers

GET /Image/Home/Grid/game-fishhunter-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 63936
last-modified: Mon, 14 Dec 2020 02:46:20 GMT
etag: "026514dc3d1d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F1xqM17DkyiReClKjfdURdMh3UQVujjaWi63ZF9ppcjjJ4gxtDQr8DFq9T7JFeF5qrZzKbdvyvJLgN7cnHboNpo0HyYnLue7sRKZNRn51M%2B6tkDBC1zFhr0N2AaxA50nf2I41Ku2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849541c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/Casino/casino-ab.jpg

172.67.184.110

200 OK

81 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/Casino/casino-ab.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x282, components 3\012- data
Size
81 kB (80860 bytes)
Hash
b9f46822302b25ff829ee8ab49771098
5ea30604d760e1a7780fc99c0c7926ce0a2a3a7e
424f2e9226962d40625d0c2f4a9e14c3c0c71f97d14253ba8ffe31b0e273f474

HTTP Headers

GET /Image/Home/Grid/Casino/casino-ab.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 80860
last-modified: Mon, 21 Dec 2020 19:50:32 GMT
etag: "074748ad2d7d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ayuKvTXzAnUwV0BnW1pMbC2QHbYRut0sA4qrpVhkiat4Eqwbykm2%2FmabgjGp%2B62QNZUc3J%2Fi1dzheQUWV6rxF9v72lnFknjVjTTTOSHRNKQ6JlNRb0H2BweN5gSXy2zoZf%2FNoSJOrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8495b1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/TTG/R77DolphinGoldH5.png

172.67.184.110

200 OK

75 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/TTG/R77DolphinGoldH5.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size
75 kB (74645 bytes)
Hash
fec4248b1c99b179ce00f300a8bc899e
79731ee72374d871c0102ef3d3a4ac0d060e849d
ff171ce0b6dc88ffc1409e472cd24c00c7f55b2d2739c91ab514523845e86e5b

HTTP Headers

GET /Image/Game/Vendors/TTG/R77DolphinGoldH5.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 74645
last-modified: Wed, 24 Jul 2019 04:06:04 GMT
etag: "f635951cd541d51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rxiDYbgh8uEWfeybQGF0ycs06b6nuytIQgCykYc4OHIgSu1VfFBIc%2Fa9z%2FnrYmTmHakP753XmcyeAWuRl4iP%2Bc4hplZ37dxoPYnGnZgw0cEeVf8gra0OsfngsmiQ7VfPT1fIiJd7Mw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859821c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/Casino/casino-bbin.jpg

172.67.184.110

200 OK

83 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/Casino/casino-bbin.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x282, components 3\012- data
Size
83 kB (83042 bytes)
Hash
5c13394e019228e85d177818b86c0e1e
2312e8942f14b8031265ff0a9ed26c4d0bdf9aa5
965049713aefd1d7c58a85ce551e18a8442118ad9238a2d8ed160d90bdd2102b

HTTP Headers

GET /Image/Home/Grid/Casino/casino-bbin.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 83042
last-modified: Mon, 21 Dec 2020 19:50:32 GMT
etag: "074748ad2d7d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Aqb2Et94byGsRwbSkrMOUELDgj%2FNlKhSPsBCFo5%2Bt%2FRl32OR8zrgBBdhsoHaMctbkQAos46loysDjFkL3c2o703zw6USegjCiRkkklHi%2FSYLzba84QXa3RiXCR1Pg9Tmuh2z5h2oag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8495c1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/QT/TK-midasgoldentouch.jpg

172.67.184.110

200 OK

96 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/QT/TK-midasgoldentouch.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=500, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=500], baseline, precision 8, 280x280, components 3\012- data
Size
96 kB (96070 bytes)
Hash
0486e0f70e56f5389ded0f22ecb1ded4
cd22bc18388e3f48091b5c3242282178157e4440
f850ca9bd951dc4b6e1ebdefd928122d121ac3565c9ed823552a03cd2a0edc5d

HTTP Headers

GET /Image/Game/Vendors/QT/TK-midasgoldentouch.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 96070
last-modified: Mon, 08 Apr 2019 22:34:36 GMT
etag: "066953e5beed41:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nybqdXZ9lxTaaAN7BKAOLABEhLhP0LTKX1vJGiLggIOkAipoTsB5Bm0OcuABYXJEe832Uxcum0EQc1upb6zexyM3Sed6DY7HGYPw65EvbuisZb131rQsZBmXtdC6E5OH19EW%2F5OQWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8596d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs243lions.png

172.67.184.110

200 OK

51 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs243lions.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Size
51 kB (51295 bytes)
Hash
1d8c4132f063b6f900201afe796244bc
dcc0be2e9dea9f4112cb5fd4c6cc2dc1c7ea86a5
98a23bbf9d2a997abdc953e839ab935af51ffb0a2f935ab3e24f5d0b871db7af

HTTP Headers

GET /Image/Game/Vendors/PP/vs243lions.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 51295
last-modified: Mon, 11 Oct 2021 23:17:42 GMT
etag: "06fc230f6bed71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tdsg1E3vL0bT9V7P%2BWZ%2FgqavOgeD7NsnnsOag1W6xRGvNNe1nRry1Cbyjdp5QX3fLJUdMwO1iPy7%2Fn%2BmGphaQkdjVYR7FhZQAQ1aGv6MtbEpmVwUWyFu3Yu0spKl496elwhNg%2B%2F20Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8596f1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/prediction_background.png

172.67.184.110

200 OK

48 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/prediction_background.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 426 x 174, 8-bit colormap, non-interlaced\012- data
Size
48 kB (47937 bytes)
Hash
913aee451efbe5afb7aed57b521b56fc
e0eb182383f843497e0a8daf3baf29c75f0c3f09
fd5b1195844a990aa72206ca302ae0d5c34be158d8f146ed44dd7c66d3cd16b5

HTTP Headers

GET /Image/Home/Grid/prediction_background.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 47937
last-modified: Tue, 05 Jan 2021 01:19:36 GMT
etag: "04494d40e3d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7yH1bewTA5x0Zq40Y6yI2NTbpaFDKW%2Fi0DDASFC3N668Vt%2FnSRdlsZLud5sif7EmidI%2F99BGmpRpFDtjyRc7nxF0GFaTbyJahyghteHL2mopfxK1FagrNV4IycsI54Il57wEKPknvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859871c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/sponsorship.png

172.67.184.110

200 OK

83 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/sponsorship.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 466 x 428, 8-bit colormap, non-interlaced\012- data
Size
83 kB (82598 bytes)
Hash
ac67ddf29abf8d4d7102714371b34682
b5bfc6b730d892cbe7548a9b9e16ae095dac9ace
262b28df003e5b55dc01c6c0ae0890ab34130b6f68c3f9eb3b10077b3d3b1563

HTTP Headers

GET /Image/Home/Grid/sponsorship.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 82598
last-modified: Tue, 05 Jan 2021 01:25:30 GMT
etag: "06194a71e3d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2BkAg8jACL2JJY%2Fqg078N1q9%2F3pZfdqdE0Nw5GEYrcacaXyq%2BX3h%2F%2F%2BvWqHp1fJzM4KfYQ2dgKr3xaQzclxgyRtbDhHlw2xu7U1GlAjMdjeuEDnGOA7GVw6g9W4lBpCeknevLAiywA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8598d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/dotapredict.png

172.67.184.110

200 OK

72 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/dotapredict.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 426 x 174, 8-bit/color RGBA, non-interlaced\012- data
Size
72 kB (72005 bytes)
Hash
fc81cd1d6b83f09ac9c4c1bed1ffbc6e
db350940d47862e884575386d39e08492b11b7be
1b9fa9c48052e5918a633638a6b4a7acb6acbcbe3aae68c4802c2cf26131c19f

HTTP Headers

GET /Image/Home/Grid/dotapredict.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 72005
last-modified: Fri, 02 Sep 2022 02:44:56 GMT
etag: "186491fc75bed81:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2mXpBBF8lb1N%2F5o3im1sImh0Hgd5rSRqZPWilVYszzFtFUpFcIbuWyoHENsUgvmCG0KjL75d63sd%2BsclEgrX3qJLIZKqAkK728f5oZrPO0%2B5IN9XI8ikHixGxg2jXLIDENL8njQPtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c879cf1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/promotion-welcomebonus-vnd.png

172.67.184.110

200 OK

61 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/promotion-welcomebonus-vnd.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x174, components 3\012- data
Size
61 kB (61098 bytes)
Hash
6218f00874d0c1797c7bf20633d0a0f6
5f9fa0cf2e389f56bcd6248817dcf1263e8fe338
bd632eb5dd7b1a3b4665d9bb772ca685bc346d6b8b338559495c1aa96652f21c

HTTP Headers

GET /Image/Home/Grid/promotion-welcomebonus-vnd.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 61098
last-modified: Mon, 31 May 2021 08:15:37 GMT
etag: "5ec1e322f555d71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKcPmNF2Q3qhLXHrxaJkTekCx2YLQlCU0uI0ZwakvleYNG8OrI%2FVS7Qz0Ga8MHjFxCZz%2BL8OjIyqWSh4eqk7EJs8XcKNNXnJG%2BBDZIA5LYJwVkz61svOdpsvE3qMisf78u%2BqWyrOAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859891c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Grid/sport_background_02-02.jpg

172.67.184.110

200 OK

49 kB

URL HTTP/2
static.r7content.com/Image/Home/Grid/sport_background_02-02.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 426x203, components 3\012- data
Size
49 kB (49043 bytes)
Hash
0adbd19b5b41117d7917e90bb9d9066b
2c1baa0e77f96b6b8ff72b9a8f8c6a9e00bf40bd
84836fde484aa126293acfcd77aa8122b211d37fb6ea2b88031662900e36f514

HTTP Headers

GET /Image/Home/Grid/sport_background_02-02.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 49043
last-modified: Tue, 22 Dec 2020 16:39:40 GMT
etag: "0aef1a81d8d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fh5LLNWCoj1u0Ch3zgDJSEklWIeUUHA2rgyBoJ5jtNm2Kr5frWzUvHGOb4ofdgyY5yMlqH6n8VKxyKGUESiuTPz6RqPmFu1ypMpwM234fo4wSv0362a07aNDctLgmseRRy46y1MU5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a81c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Banner/VI-VN/dark/light_brand_ambassador_20210331080610417.jpg

172.67.184.110

200 OK

124 kB

URL HTTP/2
static.r7content.com/Image/Home/Banner/VI-VN/dark/light_brand_ambassador_20210331080610417.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1791x500, components 3\012- data
Size
124 kB (124404 bytes)
Hash
13959bae8c3c2d78dc72a66fcfbf54ac
264a70f1607c45dc86cac957f2bb748da99c7167
69088752376468690d5c6fe869f1a290e2df6bfd8cd2f1f9f33eb90195cd9a11

HTTP Headers

GET /Image/Home/Banner/VI-VN/dark/light_brand_ambassador_20210331080610417.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 124404
last-modified: Wed, 31 Mar 2021 08:06:10 GMT
etag: "a38efdb5426d71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IivICIOm50lVbx2tl8XnA8%2F05OJrpPtJpYxhz9fdeQtEax9C2kd%2BEiY5Y1%2BP0KNjkE905O7lpnMechnF7CWtEz7uBOI2e0IIZgeV%2BnPeVVRwEzP%2F0DdFnCCfq8oAqfqWeM0Gcu1rhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8494d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs10firestrike.png

172.67.184.110

200 OK

151 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs10firestrike.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size
151 kB (150620 bytes)
Hash
9ff7a86c5912ce84d60190de0fad426d
b2acf9424e95b0faa4e6b5663b4a38fbbd261e02
56d3aa4d5532a836e7371d2e941fccf97e983c082a9613edc6dfa8f04562748a

HTTP Headers

GET /Image/Game/Vendors/PP/vs10firestrike.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 150620
last-modified: Tue, 07 Apr 2020 06:57:15 GMT
etag: "51ef7ec5a9cd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZzpnLm1mCvlaGUmX9QX%2FBbvpZeUUn4TYGH2X3au0nhCfcQsTXmJ1sCejSvl5imsXId%2Fadukp0CumexGs7SMGYxE7JX0GMl00VIBSJ9plE%2BQl%2BYv6A8w2exL9drf9wVtUVgDe2tuz7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8495d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs20fruitsw.png

172.67.184.110

200 OK

161 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs20fruitsw.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size
161 kB (160691 bytes)
Hash
8e8ed38b10a6c18ca72475f5c61db58f
9654bf589f5b4cda76874f012299b6a9b68e26d6
92e64f2aa8c2ec0826f76e456b72f106a43ae2d8fb60475045670c4df0a46246

HTTP Headers

GET /Image/Game/Vendors/PP/vs20fruitsw.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 160691
last-modified: Tue, 07 Apr 2020 06:54:27 GMT
etag: "a012d61a9cd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vcy9ZGDR8nTBEyL5Dso7y784OxqhN%2FPhXW5IUw4O9GbQ3fFDJfIGqNGwsyuO6SCtOLUI7%2FfzRQhqMnkXEzNZDaXjosxiEme%2BPZqeM0tSV2QOiezy0%2Fqa74EDhAfVvpR8aRz2fBBHag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859721c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vs20sbxmas.png

172.67.184.110

200 OK

160 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs20sbxmas.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 260 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size
160 kB (160379 bytes)
Hash
8314c6d80fd3bd2668a07ef5af616b64
59c647b3441e6ffcdc849c3ddae12e373d2512d4
8a33247d116afeac75bfa2933ad0c6fe0bb6e13957aaf034b40982c44ca4e72d

HTTP Headers

GET /Image/Game/Vendors/PP/vs20sbxmas.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 160379
last-modified: Tue, 07 Apr 2020 06:54:45 GMT
etag: "afef36ba9cd61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFLGBz5ZiCWzKiZa5GKJhAjYuw0faV0X%2F6XQaRxSugFnnn3JkoSeuWZPXbi0WAhlwEqsyXqW3NsOwaoVcQiahAqvOQEg0uXHH8PJjQB5kVIPIwBNuag5isg05nEYofrFVhXwAJsZ%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859751c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Banner/VI-VN/dark/rescue%20bonus.jpg

172.67.184.110

200 OK

158 kB

URL HTTP/2
static.r7content.com/Image/Home/Banner/VI-VN/dark/rescue%20bonus.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1920x500, components 3\012- data
Size
158 kB (157929 bytes)
Hash
4beb713ab28ddd58be40d3d1a903c78b
c2b1b946442297df8fdb83431010cd22b028a0f7
3e6a9ed3d437535a518118fd3a10b0e6c943c51d21e452c903c209e897df8ea3

HTTP Headers

GET /Image/Home/Banner/VI-VN/dark/rescue%20bonus.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 157929
last-modified: Mon, 09 Aug 2021 08:50:23 GMT
etag: "77fd3797fb8cd71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fKTYlm0%2FbRVoJodCIJyNyzyuG5LOqWOmQRP9IPrenTCghP74aEMd5FaBuydEAUhPjYea9ZqU4xO%2BaeQf1ea8liyPEqyO5YHUq7nkYhO7R129c3r5SOHUKvvBiJW8zcSWHUgUZgS2Tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c869a91c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/vswaysrhino.png

172.67.184.110

200 OK

114 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vswaysrhino.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 400 x 600, 8-bit colormap, non-interlaced\012- data
Size
114 kB (113663 bytes)
Hash
dd7f5e7e8165215c34426c6e17672f3c
14eacffad3e3a97034ab49a0e5134f21ce06b313
ab2439db58f368630e3641ba7c61e331e659b01cdc95eba075662c724e23fc10

HTTP Headers

GET /Image/Game/Vendors/PP/vswaysrhino.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 113663
last-modified: Mon, 25 May 2020 08:49:08 GMT
etag: "01a335a7132d61:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gALQI53pnTik5wB%2FxrAtVcYVOi3F9mKrXKKbEk60mcUthW%2BcqhQYsH6ytvn0Poh0ipZ%2BXajFhH1xYpC4GQbSnmW%2Fj0X56EKw57sdQW%2Fe4d2Cag%2FskdvmjgbdBCX6jxuOK2A8g%2B%2FmWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849631c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.r7content.com/Image/Game/Vendors/AG/SB49_EN.png

172.67.184.110

200 OK

112 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/AG/SB49_EN.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 462 x 516, 8-bit colormap, non-interlaced\012- data
Size
112 kB (112402 bytes)
Hash
67baace158bfb35628f11fe79762d039
7a02e46c88002164b867dcd8df64b301b587b6b6
00de96bee3c05590484e0a946d565bd0a6b464d614ac41722c168117e5156a8f

HTTP Headers

GET /Image/Game/Vendors/AG/SB49_EN.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 112402
last-modified: Tue, 27 Aug 2019 03:08:30 GMT
etag: "0cbd7b3845cd51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3JKuvlCTTsYmgWhjxFLgmbr87%2FTmYNLPQ7KrcPhX6osjn23Z%2F3cU44BOiW8fxdpnj5eIMTHJ3JONkWeaHWICDRdHHeVRsTPsfGB6FHoio9VX8lH9bhY2Q964Xf4nZxujHJu%2FK1mcLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859841c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-T5C73L4

142.250.74.72

200 OK

45 kB

URL HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-T5C73L4
IP
142.250.74.72:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1720)
Size
45 kB (45381 bytes)
Hash
e8c8e21e19fb1efbf126f32b115fec7d
6983d5419146f7b8548ecec0582f35570b2885b3
46f0cad032f332ec6a67a0ef5f316340a8b6c63e07f6535ec5cdac6b3537fee1

HTTP Headers

GET /gtm.js?id=GTM-T5C73L4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Sep 2022 11:09:19 GMT
expires: Thu, 15 Sep 2022 11:09:19 GMT
cache-control: private, max-age=900
last-modified: Thu, 15 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 45381
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 11:09:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

static.r7content.com/Image/Game/Vendors/PP/vs1dragon8.png

172.67.184.110

200 OK

157 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/vs1dragon8.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Size
157 kB (157013 bytes)
Hash
12b735d971d20099c709187bc21d73a1
5a0741fa5b59041956b5baaf41e4d7e275f8b2f6
cb09df3401205bc703b67a2f123985324e4dc3e90a46ec5aa4f5863f0aa87c64

HTTP Headers

GET /Image/Game/Vendors/PP/vs1dragon8.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 157013
last-modified: Fri, 30 Aug 2019 00:44:12 GMT
etag: "01683acc5ed51:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Hdu8zNKC%2Bj6lw1csOApuplFNaLGT28aWu%2FE7LP9QY5SWl3mqShucZxOeblhZC4fXCT1rwVZRlVFnkHf92CTLowEnuJmaB0hR4mvXvUl5HoBbO5LFS0KET7Oo5aiezBAHDeUdFYRZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c859761c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Home/Banner/VI-VN/dark/Momo.jpg

172.67.184.110

200 OK

148 kB

URL HTTP/2
static.r7content.com/Image/Home/Banner/VI-VN/dark/Momo.jpg
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1920x500, components 3\012- data
Size
148 kB (148505 bytes)
Hash
a38c7ce1411c38dc06df9774c1c60a05
e12b3996a6d0892d69c76d3ed3b27437c2b082e3
9b0e6bde8cdd2d081aeb3d43b681d9932b8597342e8b99537d952312b381d2f5

HTTP Headers

GET /Image/Home/Banner/VI-VN/dark/Momo.jpg HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/jpeg
content-length: 148505
last-modified: Mon, 07 Mar 2022 02:40:17 GMT
etag: "2d9e2daecc31d81:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tv4GmNV6PU%2FH%2Fyp6nmPMMYq8OHb48j1BVrmwOeO2EWBxe3j3ui5Jhd2555AzDAZeVudXmkpMkx1pnvh1d5jQ2KHQYfm0dFhTPoYDKaH2h0cuMuLIgxyCxi%2B3RoOoIS5Dge2uYmxrfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8ca9c481c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/FG/NE_EastSeaDragonKing.png

172.67.184.110

200 OK

235 kB

URL HTTP/2
static.r7content.com/Image/Game/Vendors/FG/NE_EastSeaDragonKing.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 736 x 775, 8-bit colormap, non-interlaced\012- data
Size
235 kB (234619 bytes)
Hash
b691cae217326c1dc32c679a4e210dba
ee1f701203d8f5500ec7e4f4adcb4b7b606ad2b5
98a4177e454c4094b7822d56543f0a9b71b858d31cb507c3bb891deb348f077d

HTTP Headers

GET /Image/Game/Vendors/FG/NE_EastSeaDragonKing.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: image/png
content-length: 234619
last-modified: Mon, 11 Oct 2021 23:17:42 GMT
etag: "06fc230f6bed71:0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pe410YnLMvJWr3tT4bmIQsm3022%2BB9V83qNZqv7D0C%2BIvsjJh6E5wUXSt2N7wueGC8T%2B4Eh8mGDXsdm3TE2pGEWeBdvC1x1LZTshSVDbNCDAgqoF0AcX4uFL11b23sy2Xgga4vIPug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c8597a1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.royal77vn.com/Style/Font/FuturaLT.woff

172.67.74.249

200 OK

30 kB

URL HTTP/2
www.royal77vn.com/Style/Font/FuturaLT.woff
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 29960, version 0.0\012- data
Size
30 kB (29960 bytes)
Hash
fbb4cd8a88c270eea0a9dbfc036b4cb9
a6c3c9a5bda8a3a659636c2e353f0eb4445a0d07
b0b80ab8b88589e458a4deab9efb0217d0f4be965f765c905cf39894868540de

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Style/Font/FuturaLT.woff HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.royal77vn.com/Style/font-style.css
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:20 GMT
content-type: application/x-font-woff
content-length: 29960
last-modified: Thu, 25 Mar 2021 08:38:32 GMT
etag: "936b433d5221d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HWd063F8UCQFFBExC%2Bjvdavnr88EJYVtGN1T0Fwu0gwwHMlC6P0pwww%2Fv6xdGFqIrrGKeXIMLzOho5nIMcCYGdP7NffA%2BuzcZceH1CiFxiSS1M%2Btd0mp%2F0urKsbbQYjQ%2FoZD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8d4acb50b4d-OSL
X-Firefox-Spdy: h2

www.royal77vn.com/Scripts/icomoon/fonts/icomoon.ttf?l1yt7y

172.67.74.249

200 OK

35 kB

URL HTTP/2
www.royal77vn.com/Scripts/icomoon/fonts/icomoon.ttf?l1yt7y
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Size
35 kB (34932 bytes)
Hash
c5f79c936d9843b173e78aaf5b6fe116
1bca49f5a3839f4a0895da233b24271dcbc86940
324f56859753a8f544c035590e099feb71cb97e38d8f448db9b2dccbf492a3d6

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Scripts/icomoon/fonts/icomoon.ttf?l1yt7y HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/bundles/main/css2?v=Lo53P49bmmc1kGeMiMr8OG1bGqBRWQbwKlNMe1tnAEs1
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:20 GMT
content-type: application/x-font-truetype
content-length: 34932
last-modified: Thu, 06 Jan 2022 07:08:51 GMT
etag: "68151542cc2d81:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aN%2FSQoA2tbdk64sxk6xu5umA%2BwOLeEqOlVWPSfWmDXdJckSStOyaE0BESc5vDI5ZhpqP%2FlXzInfUU%2B6aaTlGd6UjD7thF24MOJuS0zD8Ftjw0ItpsQkfh2NzVAfsAACXUXqy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8d4acb90b4d-OSL
X-Firefox-Spdy: h2

www.royal77vn.com/Style/Font/FuturaLT-Bold.woff

172.67.74.249

200 OK

25 kB

URL HTTP/2
www.royal77vn.com/Style/Font/FuturaLT-Bold.woff
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format, TrueType, length 24832, version 0.0\012- data
Size
25 kB (24832 bytes)
Hash
d30dbb3b47ec3d52d8e4bf7ead4a0700
355f26a7c3eb0385d49783ed84a4c10f514ef2ae
0500eac4f05cf096744bf9eab39d27e1716b1382d35d7526f991176f7f945e05

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Style/Font/FuturaLT-Bold.woff HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.royal77vn.com/Style/font-style.css
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:20 GMT
content-type: application/x-font-woff
content-length: 24832
last-modified: Thu, 25 Mar 2021 08:38:33 GMT
etag: "fcd853d5221d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kORFzvmux2w%2FCJUcGm4jWE3jGioB%2FPp32zkmYNrfch1jX8PlBKu20N3TFTgdYj6dIHitkMP%2Fj338ewTQN6b%2BmvNYy0nR1tton4yom7wd4Ic%2FAJ3Igqg5t8HGfHsBKBJguEUt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8d4ccd70b4d-OSL
X-Firefox-Spdy: h2

www.google-analytics.com/analytics.js

142.250.74.174

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.174:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1325)
Size
20 kB (20006 bytes)
Hash
56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Thu, 15 Sep 2022 10:41:12 GMT
expires: Thu, 15 Sep 2022 12:41:12 GMT
cache-control: public, max-age=7200
age: 1690
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.sca1b.amazontrust.com/

143.204.42.156

200 OK

471 B

URL HTTP/1.1
ocsp.sca1b.amazontrust.com/
IP
143.204.42.156:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
e9c22577688ee0dfca317ee6050925cb
aa83257a376422ceb66dfca463293e9d2d1997d6
fe6583b6ced0a23d47d53d1efe95397c6f482e4b8f46391f70b0d5876966e6ee

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 15 Sep 2022 11:09:22 GMT
Last-Modified: Thu, 15 Sep 2022 10:19:23 GMT
Server: ECS (nyb/1D33)
X-Cache: Miss from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: orwq-iptFzvwxm5r2TieefPLA8IBxZPwJMRyHucmcQO5nN7KYquX0g==
Age: 2999

secure.adnxs.com/seg?add=18337356&t=2

37.252.173.27

307 Redirection

9.8 kB

URL HTTP/1.1
secure.adnxs.com/seg?add=18337356&t=2
IP
37.252.173.27:0
ASN
#29990 ASN-APPNEX

File type
data
Size
9.8 kB (9793 bytes)
Hash
2239f561b20dba6db134c255d37de804
2400b6051a52df72f160b4b6f3c07b89dfc7f1e2
0564d7bd4c789578a039b130f710c6a3bbd67ca2fcffbde53925c1bb9442b238

HTTP Headers

GET /seg?add=18337356&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 15 Sep 2022 11:09:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D18337356%26t%3D2
AN-X-Request-Uuid: 7f14074f-2f5c-46dc-88ac-e4b18f151b07
Set-Cookie: uuid2=8220113282184102494; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 14-Dec-2022 11:09:22 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

www.royal77vn.com/bundles/main/css2?v=Lo53P49bmmc1kGeMiMr8OG1bGqBRWQbwKlNMe1tnAEs1

172.67.74.249

200 OK

17 kB

URL HTTP/2
www.royal77vn.com/bundles/main/css2?v=Lo53P49bmmc1kGeMiMr8OG1bGqBRWQbwKlNMe1tnAEs1
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with very long lines (64780), with no line terminators
Size
17 kB (17302 bytes)
Hash
551701472cb707c83099edfb1fa2fa17
f1e8bb188d20d7742ac99f2c6d50cda1d4276462
19464106ec6e69d2f26ee55d9adce3c154fde40dc3ae6357f7825f5bf6196ffa

HTTP Headers

GET /bundles/main/css2?v=Lo53P49bmmc1kGeMiMr8OG1bGqBRWQbwKlNMe1tnAEs1 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: text/css; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4TlC5hVr29YHPgWUWb9x3QhTLT9lsIYOXdRv9%2BBbvH%2BSJeT9h0xDB7iJ8Npk%2Bb%2BK4XSccaAE0HnVltKG4nyUWY1LFBjktEsxCPaVt3PAg%2BMRRy3JGLkhAGbHrc5LXr5QV5q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c67dcc0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

d313lzv9559yp9.cloudfront.net/f32759c50f263c370d528f5f196c72f9.js

54.230.111.67

200 OK

42 kB

URL HTTP/2
d313lzv9559yp9.cloudfront.net/f32759c50f263c370d528f5f196c72f9.js
IP
54.230.111.67:0
ASN
#16509 AMAZON-02

File type
data
Size
42 kB (42486 bytes)
Hash
7edede55d670d2ccfa24e29a04a7c61b
8628c0b81f1d97a4f330a3c5332a83343153e31d
ed9e714cd40a37ffb64fb3b8ecc11bde2651249b6aeb6b0d444f788c3887b8de

HTTP Headers

GET /f32759c50f263c370d528f5f196c72f9.js HTTP/1.1
Host: d313lzv9559yp9.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/x-javascript
date: Tue, 13 Sep 2022 20:39:13 GMT
last-modified: Wed, 04 Mar 2020 11:17:44 GMT
etag: W/"7930f73f33ddf12ade59e75b00ac946b"
x-amz-meta-md5-hash: 7930f73f33ddf12ade59e75b00ac946b
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jEhGJVOYqBFTtREuywh8cUkPaW42_uTQXFK11Q5KBQc4SXGBUDrkeQ==
age: 138610
X-Firefox-Spdy: h2

cm.g.doubleclick.net/pixel?google_nid=adl&google_cm&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27

142.250.74.130

302 Found

330 B

URL HTTP/2
cm.g.doubleclick.net/pixel?google_nid=adl&google_cm&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27
IP
142.250.74.130:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
330 B (330 bytes)
Hash
1e3e385848cbf593619426534ca57822
177eb23402c5fe2b02d5c5eb69f48827e0ef2c09
0f53f2eb960f4e595d3b646e1ed460b89179b5d6e7598961dd7d8877c221faff

HTTP Headers

GET /pixel?google_nid=adl&google_cm&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27 HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.royal77vn.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
location: https://cm.g.doubleclick.net/pixel?google_nid=adl&google_cm=&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27&google_tc=
date: Thu, 15 Sep 2022 11:09:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 330
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 15-Sep-2022 11:24:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/shared/css?v=tWtDTHGGKqL5aRIAq3CzW58GTWFZ7namrO34NpO8dmU1

172.67.74.249

200 OK

12 kB

URL HTTP/2
www.royal77vn.com/bundles/shared/css?v=tWtDTHGGKqL5aRIAq3CzW58GTWFZ7namrO34NpO8dmU1
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
12 kB (12114 bytes)
Hash
5a68e8e0f6ae875bd6345b43db9b3fcf
908bce89aeac7968ea89e0f0b2fddcb03aa1e9bf
b711cecc1956cf6419ade8d12efdd14d37d0fb0c91d1a232b01c1ea62139840d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /bundles/shared/css?v=tWtDTHGGKqL5aRIAq3CzW58GTWFZ7namrO34NpO8dmU1 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: text/css; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeGnjtJRCPPw1LMEHnOBBX1ccYQon7SAvMHnk9xD6uqdzsbnnFIugxjnKS3JipV9D0j3HiUe8HWyClUEqA2L6y6OeXPupQrXbbTbtHtRdwmqZjC33%2FjZ%2BVEfeszfO1VAzCtv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c67dcd0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

cm.g.doubleclick.net/pixel?google_nid=adl&google_cm=&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27&google_tc=

142.250.74.130

302 Found

239 B

URL HTTP/2
cm.g.doubleclick.net/pixel?google_nid=adl&google_cm=&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27&google_tc=
IP
142.250.74.130:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
239 B (239 bytes)
Hash
c6e56f979c17237f2e21f5959d68e8ca
e11c209142617b45ceee574ba68399a212bef1ee
29d69f8c119d517c443f4112cfeed028551b352f1921664db223f23bf5a70330

HTTP Headers

GET /pixel?google_nid=adl&google_cm=&google_hm=b%27TUhmR1puRExhZGZPTjdkaDlXVWNEaDY5%27&google_tc= HTTP/1.1
Host: cm.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.royal77vn.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 302 Found
location: https://sc.adelement.com/cs?google_error=3
date: Thu, 15 Sep 2022 11:09:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: HTTP server (unknown)
content-length: 239
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

sc.adelement.com/cs?google_error=3

63.32.10.50

302 Found

0 B

URL HTTP/2
sc.adelement.com/cs?google_error=3
IP
63.32.10.50:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /cs?google_error=3 HTTP/1.1
Host: sc.adelement.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.royal77vn.com/
Connection: keep-alive
Cookie: OAID=MHfGZnDLadfON7dh9WUcDh69; _ae_rt_tt=eu-west-1; _ae_rt_te=; _ae_rt_dt=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 302 Found
date: Thu, 15 Sep 2022 11:09:22 GMT
location: https://ib.adnxs.com/setuid?entity=389&code=MHfGZnDLadfON7dh9WUcDh69
server: nginx/1.18.0 (Ubuntu)
X-Firefox-Spdy: h2

ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D389%26code%3DMHfGZnDLadfON7dh9WUcDh69

37.252.173.27

200 OK

43 B

URL HTTP/1.1
ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D389%26code%3DMHfGZnDLadfON7dh9WUcDh69
IP
37.252.173.27:0
ASN
#29990 ASN-APPNEX

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef

HTTP Headers

GET /bounce?%2Fsetuid%3Fentity%3D389%26code%3DMHfGZnDLadfON7dh9WUcDh69 HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.royal77vn.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 15 Sep 2022 11:09:23 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: a012f615-8eac-45b1-abf5-5ee4954cfa28
Set-Cookie: anj=dTM7k!M41.E:2jUF']wIg2E>=wjxU9!]tbPl1Mu5QgUl$=Bb>-gwrU(eD!Eih29n30/ZO$4yf4rg^rEAN)YjL%(2K:$doS]%6lP`6yxMR; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 14-Dec-2022 11:09:23 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 539.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5754e945-dac1-48d0-8300-12286ffe02b4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10188 bytes)
Hash
d62d6861a80946a4cf3ba7e2a1cb0638
c096bfad52996315c174183644db3cc2c77d5f2c
693968cf7b76de9afb3440fe18800c02832daf3dd8a5de547e6dd9b6e4096b53

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5754e945-dac1-48d0-8300-12286ffe02b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 10188
x-amzn-requestid: 48b5c3c4-d155-4e66-949e-ed631bf43890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeB3VFE7IAMFcnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632249c8-2c5c452071eddd8e23dd6393;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 21:38:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: lV7xI9zbmNkxxItOZkSiVHwQRl4FnvJYqtNfuXJKFfrDiRuUC28oNQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:48:12 GMT
age: 48072
etag: "c096bfad52996315c174183644db3cc2c77d5f2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /bundles/site/script?v=NwzuTVJAIBFAw8OY--Fp1SXBnIuuUJhRLyf6m6X9jD01 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: text/javascript; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ptaoqASqgwOV3VDSLkhY%2FhQ3Fygo5LugUX4T3UuDSg1bbI5zgWPPKaKGds9%2FgFjY%2Bu0nJWi22zILOIsezMeDvX8uREYPdskHm%2ByLWuP2JpyPs0L3%2F2nGYtLLzP0vLM1nRt%2FC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c979050b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/

172.67.74.249

302 Found

0 B

URL HTTP/2
www.royal77vn.com/
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 302 Found
date: Thu, 15 Sep 2022 11:09:16 GMT
content-type: text/html; charset=utf-8
location: /vi-vn
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nOCbB2PmCmKWN%2FE34Nh4CvERC91ZW9qlmkz1WsGmCmqV7TNKEHaRKFvJVCTBFM5%2F7rwVWy8Q3XMFfbo8GRYES7ZzAJ%2FD5l3ka9M9Tws5d%2B6bOsBwE03s5yQ7iT5nKmTqy1N4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8b9c9150b4d-OSL
X-Firefox-Spdy: h2

www.royal77vn.com/Image/Common/Flag/vi-vn.svg

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Image/Common/Flag/vi-vn.svg
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Image/Common/Flag/vi-vn.svg HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Mar 2021 08:31:55 GMT
etag: W/"bf6a24505121d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=enuVFIaTc7o0L52thyDL2yUm1ZfRiVHMzGp0Qd7TV5R69lQZ4ysM5FLvcRoo4GIXhMs6uPcRVxboVt4i%2Bm%2FbCXv4%2B0fOxcUMDXNLtVh2uooor6T1AqmXEreo64Y6U0i%2BwKK6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c68dd30b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/Style/font-style.css

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Style/font-style.css
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Style/font-style.css HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: text/css
last-modified: Thu, 06 Jan 2022 07:09:17 GMT
etag: W/"4f74fd51cc2d81:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hoEkBltfP%2F7MTvFoREGcHDzv56PcWUpP%2BgwGuYIaLMSU1cSBdrDTP7j6r6Q1teEinxjIBI9NhvZHYEQlE1eZjyIKF8ehFVZtowYzoK1uU6uyWG8IsItuiLUQOMz7BKsPJP9g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c67dc90b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/site/css?v=QrbtpzLOcYxnx2L_a7jcNSk-dpkHy-IHdQI73VUwseY1

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/bundles/site/css?v=QrbtpzLOcYxnx2L_a7jcNSk-dpkHy-IHdQI73VUwseY1
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /bundles/site/css?v=QrbtpzLOcYxnx2L_a7jcNSk-dpkHy-IHdQI73VUwseY1 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: text/css; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PgqWQ4p31JbrkmIi0QRaqX1KWWTWD2KjDrr11waUY54iXT9l8gTOUrfwU7TvLFN0Hf4OjDSsQABRMAMFaHwP86UAfkpv9eaDnrOofu33eRRg5A1HbE2QIIA25p2%2BKs3GC9fb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c68dd10b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/main/script2?v=mhwsRbK5i6cdeU_EQ18zKEbBbu_jA-dBvALXx_BgsiY1

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/bundles/main/script2?v=mhwsRbK5i6cdeU_EQ18zKEbBbu_jA-dBvALXx_BgsiY1
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /bundles/main/script2?v=mhwsRbK5i6cdeU_EQ18zKEbBbu_jA-dBvALXx_BgsiY1 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: text/javascript; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W3v79JxVvaWHITZDv%2BDoD948GjDy3tzpfTsf4wxLKAZR5f6g8l41f1WIObGNdDbdaAXI8ZxbmvdHffygOujE7OrCMqBvXmpIRGcMyi3srU9yXqH%2BIgVP2n5AXlPnpYWTmOFx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c979020b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

static.r7content.com/Image/Game/Vendors/PP/Fruit%20Party.png

172.67.184.110

404 Not Found

0 B

URL HTTP/2
static.r7content.com/Image/Game/Vendors/PP/Fruit%20Party.png
IP
172.67.184.110:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /Image/Game/Vendors/PP/Fruit%20Party.png HTTP/1.1
Host: static.r7content.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 404 Not Found
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o1UzwuNUI%2BnqrTp8da%2FOMh9x%2FsMjXxspe%2FnHhgg%2B7rCjzkOuF0NCYXeg41asxrzM87Sfqj3JfQI5QaDSSpQh5mmNiwSMCUppAwpmp17aZzg12KtIZKLprtHljpoUaVEQlaVhPmWpQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c849601c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.royal77vn.com/Image/Common/Flag/en-us.svg

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Image/Common/Flag/en-us.svg
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Image/Common/Flag/en-us.svg HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Mar 2021 08:31:54 GMT
etag: W/"934f794f5121d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wBriLUfAu7ngyh5O%2F8PzC3bSiFMG0Kf5mmfDlCHOZwPhncLAbG4wPAbr8uftW8OUs67koULyfSGNXPBrTANj0gw%2BfcdnDclIXMlXkWAg80Lax6Hc2%2B1vumQxuZEKdBihTa6Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c68dd40b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /bundles/main/script?v=OeDC9_g7fDq0lBCMb-pQ6kIMTn_vWNnrNwLWdXp0Pik1 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: text/javascript; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HUsRHMKDb5Ize9Z%2FrVALcBTQPzQc%2Fll6uh34eiwkOaypU1u%2BoD1oR4ULp3u5KLJl7ZgPEeFcyCgA5HShEvNSreQoEgMtAmYnnI3hElZC7qjLWWKpqlpRw3KSWT2ZPIHE8B0e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c979010b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/Image/Common/Flag/id-id.svg

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Image/Common/Flag/id-id.svg
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Image/Common/Flag/id-id.svg HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Mar 2021 08:31:54 GMT
etag: W/"c193e04f5121d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=udpONDXSydSvRZqNte1sYmhASXLMW949D617nq5U0d8j542ccWsdPuAxKMK9kjbnzgyF2lR8SB2A1Pw5%2Flhec3UmOvxg8D0bDvp6Yrv7bu0jmKIZ6JsdFP%2Fzg49ai4gqAdbt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c68dd60b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/Scripts/BackToTop/img/cd-top-arrow.svg

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Scripts/BackToTop/img/cd-top-arrow.svg
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Scripts/BackToTop/img/cd-top-arrow.svg HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/bundles/shared/css?v=tWtDTHGGKqL5aRIAq3CzW58GTWFZ7namrO34NpO8dmU1
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:20 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Mar 2021 08:32:43 GMT
etag: W/"b020f76c5121d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R0m39%2F3NzXDVdftJ1jAxY%2FWJUe3Qu9T55v11%2Fpp8VlgmJdCZrQbBPoYwZP4y5c9%2FIliE792UCkgIznGXWQtrJgLi1qfb%2FlRAdtMB6KeLZNp00uhnFSon%2B3KwYPgbkGBhlDPp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8d49cab0b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/Resource/Index

172.67.74.249

302 Found

0 B

URL HTTP/2
www.royal77vn.com/Resource/Index
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Resource/Index HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 302 Found
date: Thu, 15 Sep 2022 11:09:17 GMT
content-type: text/html; charset=utf-8
location: /vi-vn/resource
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HkQO9HLl5bzW13hNM6LHqom9a80ry6MnWbT1WHBGrtZTIQXtpPBBbME%2BXErwfJq1itAcgTcMxm9n33d0%2B6tOt6ILrisD2G%2FY44y4KdhmjDeuQL5Ke3ibWl10QiUksYdoqphF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c978fe0b4d-OSL
X-Firefox-Spdy: h2

www.royal77vn.com/Image/Common/Flag/zh-cn.svg

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/Image/Common/Flag/zh-cn.svg
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Image/Common/Flag/zh-cn.svg HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:18 GMT
content-type: image/svg+xml
last-modified: Thu, 25 Mar 2021 08:31:55 GMT
etag: W/"a91a66505121d71:0"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ua3UrMio5a79A8sGC5R5QSLvkEy4a7YcOC%2B%2B5AipBbkWVlVGFbvRijD9Ag9ZnB%2Bkkj%2F37I4Bun3q%2FBicRGgMvTuMlB81x56pEO%2FOH7PSATOBLcBmYRi1nyWaMvNoIa%2F%2BtLtM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b0e8c68dd50b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

www.royal77vn.com/bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41

172.67.74.249

200 OK

0 B

URL HTTP/2
www.royal77vn.com/bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41
IP
172.67.74.249:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /bundles/shared/script?v=KpLPCPb2SE6PpfhTzxJ7PYNBl4P39IFc7RSVsbPQdD41 HTTP/1.1
Host: www.royal77vn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.royal77vn.com/vi-vn
Cookie: _culture=vi-vn; _theme=dark; __RequestVerificationToken=y0JWJH-DTMQGXLxHxVhtbEKL3JDLLdJvReD7dYHy3s6Q1J05h7Jc1J6_KH2cfLBP025HA4hetzk38pm-cQebEcUgHhiPyYhJOo7AhyJIV-81
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 15 Sep 2022 11:09:19 GMT
content-type: text/javascript; charset=utf-8
cache-control: public
expires: Fri, 15 Sep 2023 11:09:18 GMT
last-modified: Thu, 15 Sep 2022 11:09:18 GMT
vary: User-Agent
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gMvvTgfs%2BmsfCODIST8%2FF45dgH8tzl8%2Bg%2FxsZGqAesu96p9AVmudajOlnV%2BOnuhHRcirLNimFKFIYW6v7k7SeUmN8U7U%2FsVo3HtuS9reV%2BBqZ1AvHlnwCkzz%2FJjogXkUikc2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b0e8c979040b4d-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (19)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations