{"report_id":"8d4a1fad-33c2-4f5b-9673-75ad50d3862d","version":6,"status":"done","tags":[],"date":"2025-11-09T23:10:47Z","url":{"schema":"http","addr":"1217.cc","fqdn":"1217.cc","domain":"1217.cc","tld":"cc"},"ip":{"addr":"103.125.85.149","port":0,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"final":{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"title":"GALAXY TM","dom":{"size":73736,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11944)","md5":"42abdc77bc0cab9d997e3bbe3170fa44","sha1":"03c18d99da7b2191769a7c898cf568b21b02d797","sha256":"ca5bc6822889b30a51022693042fe684e95fd371b46884b58b6b819f739dca3c","sha512":"608e783952267c374e0c0e4058c67c6623b04ba1a9d0adecba62294391f759949a6e7a6317ddbcf32480fea567b9823d904a192e2cdf577aa033aa0c5a03cac2","ssdeep":"1536:eBA9CU7oh31Qw7f8OwMogBt9gHBGn0kv1xuVqwGeb5qT279sV2USADb7N:EcCU7oh31Qwb8OwDgb9gHk","tlshash":"b773b623e5401967106388c9b526bf14a1c6e70ee7578e51bffd0236bfcecb3225169a","dom_hash":"domhash0dd687b0aced405467f40e449c20eec8","first_seen":"2025-11-09T23:11:08.843973Z","last_seen":"2025-11-09T23:11:08.843973Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1217.cc","fqdn":"1217.cc","domain":"1217.cc","tld":"cc"},"ip":{"addr":"103.125.85.149","port":0,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-14T23:10:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"www12120719.ats.elegancepath.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"1217.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"1217.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www12120719.ats.elegancepath.online","ip":{"addr":"76.223.106.153","port":3637,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-12","domain_rank":0,"first_seen":"2025-11-09T23:10:50.997816Z","last_seen":"2025-11-09T23:10:50.997816Z","alert_count":1,"request_count":1,"received_data":355,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"mf1.agilenavi.com","ip":{"addr":"103.18.175.244","port":443,"asn":55303,"as":"EAGLE SKY CO LT","country":"Brunei","country_code":"BN"},"domain_registered":"2020-05-08","domain_rank":0,"first_seen":"2023-05-05T21:00:07Z","last_seen":"2025-11-07T09:38:51.80286Z","alert_count":0,"request_count":1,"received_data":216,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn4.cldfvn.com","ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-19","domain_rank":0,"first_seen":"2024-12-01T00:00:06.170205Z","last_seen":"2025-11-07T07:49:52.649764Z","alert_count":0,"request_count":28,"received_data":5226551,"sent_data":13669,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"analytics.agilenavi.com","ip":{"addr":"54.178.240.30","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2020-05-08","domain_rank":0,"first_seen":"2022-06-30T09:02:10Z","last_seen":"2025-11-07T07:49:52.067589Z","alert_count":0,"request_count":3,"received_data":342,"sent_data":1763,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mf2.agilenavi.com","ip":{"addr":"103.16.121.244","port":443,"asn":55303,"as":"EAGLE SKY CO LT","country":"Brunei","country_code":"BN"},"domain_registered":"2020-05-08","domain_rank":0,"first_seen":"2023-05-05T21:00:08Z","last_seen":"2025-11-09T08:17:26.661066Z","alert_count":0,"request_count":1,"received_data":209,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"3606dh.com","ip":{"addr":"103.125.85.204","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-09T23:10:50.991428Z","last_seen":"2025-11-09T23:10:50.991428Z","alert_count":0,"request_count":1,"received_data":457,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"1217.cc","ip":{"addr":"103.125.85.149","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"domain_registered":"2020-01-17","domain_rank":0,"first_seen":"2025-11-09T23:10:50.992Z","last_seen":"2025-11-09T23:10:50.992Z","alert_count":2,"request_count":1,"received_data":1312,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"g4.cldfvn.com","ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-19","domain_rank":0,"first_seen":"2024-12-01T00:00:06.330494Z","last_seen":"2025-11-07T07:49:52.223099Z","alert_count":0,"request_count":138,"received_data":2070984,"sent_data":84672,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www000554687854.122577.net","ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"domain_registered":"2024-11-30","domain_rank":0,"first_seen":"2025-11-09T23:10:50.992741Z","last_seen":"2025-11-09T23:10:50.992741Z","alert_count":0,"request_count":23,"received_data":544568,"sent_data":22317,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-09T22:13:41.73664Z","alert_count":0,"request_count":2,"received_data":878807,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-0715e4e2.464ca875.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"441f578d9f9fbef832cb0e28a9221bb7","sha1":"66a9dbd19db93504596570f1490d56e0ce603447","sha256":"56de1adcab4e518db353b241d738c13e4e89ee4c9d857253816421bb13605809","sha512":"bfa31879ca6f5e5d910d05c804a38ec6f84fc4f68d89e6e9c10a0f71982c66b04f6468427edae4765840d9dd72082d0617538d0f255cd152b6162740330e51a1","ssdeep":"","tlshash":"695197993187f89709e42196207fb783f1d62c0e6c3ef251d7b1eee0df1198a1129b0a","size":2469,"data":"","first_seen":"2025-10-15T04:32:36.032896Z","last_seen":"2025-11-12T23:56:07.334504Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-465278e6.03c36fba.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5feddd4b03687d6531e174071f6bb914","sha1":"327b7b2af4cb9d18941923f43dd7e3ae77505a97","sha256":"2f478e28492864249725fd1daa4d0a6337270dab02f0113f998c2c4cbcffefa3","sha512":"411b990b8af1f6443b89643910920d33235372709c50a7c2ca62a66d7cef219efead094a1715edab6e49a06ffc382b8694afc731e003034c8973b3ecc9c8cf36","ssdeep":"","tlshash":"0fe05c5c70a2f8b936aa90d8104b7794909a541a39165ee589f4c5c07730ace401ada6","size":437,"data":"","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-08-07T21:57:50.459854Z","times_seen":1186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0e200e.d16bb4d3.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c75f2d0b1e1374dd0022a7ca2142147a","sha1":"dc17a5da381bc348a631e76031519556b8c0015f","sha256":"50b4a69a159737fbe0c31bebe1c920e420a93a3ff976910041ab07e5c5a05f50","sha512":"fac5b0e4188f753e3e0ae28e18cd3f21a8be49e6ee083aba2041d53776a2bf913f0adbf8a3cc066466a28173f766ccf63460ee563102b0dda65c754b9f3c5dbf","ssdeep":"","tlshash":"f131104e79eaedf504f462d312bfa303f12525266832f18167f0dad0a8149878172e9a","size":1486,"data":"","first_seen":"2024-09-23T15:27:31Z","last_seen":"2026-08-07T21:57:50.546024Z","times_seen":1030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"eval","is_inline":false,"md5":"f8b1fda58a31b42bb1b9337db7682b3f","sha1":"6ca48afca591dd3e544e097837caad276d3b91dc","sha256":"fab327998bd92ba11b6d69efbf30c034b23830a17c7eb0bb95f5baaa4e20215a","sha512":"b73db2bf94bac9e8da84749f6f1726771694e6f72985ced83f19ace74904af89245b2e8ee60778e2655bf0da0fc537a9308420a8ceff88d989c1f817d6c2a4bd","ssdeep":"","tlshash":"cfb092aae59032063ef2885a6b1fea11b057008608089241494d8c00666a76aa276c8b","size":103,"data":"","first_seen":"2024-08-14T06:25:15Z","last_seen":"2026-08-07T21:57:50.5626Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XVSPVLR6E2\u0026cx=c\u0026gtm=4e5b50","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"007b8916f0f5f65c0fe6d8eaac64bf7f","sha1":"ad43e139bd549a9a0aecb8b6ba389e3fe877cae5","sha256":"ec65b561d82549f44abc5fdd084183c315819c290735c3a21ea72a94eca268c5","sha512":"915baa2aaf8f1cd6620f1b7e511f5106c873264d33d9abd0b9faeb4a922be35ad08f0e6bc53155dbbe982a2c2bc518600beb2b787398ce29c2b2aa9ab332c86d","ssdeep":"6144:zJjxe4VuE+astnXRXy16OZd0CdpIQfYhvgJm7Tmn:lFeguaQXRXyBRYhg","tlshash":"e5941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","size":429191,"data":"","first_seen":"2025-11-09T23:11:09.069755Z","last_seen":"2025-11-09T23:11:09.069755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9f9fb23fab6f81117e4a5b3abbfd3fa4","sha1":"c4b92809a2248df127ac7d9675940708fea96063","sha256":"c0a41917228b23fd10b4b81347fd327225d91ee3e9c5bc82d16ecfa38a5d3653","sha512":"b35b02434c7b6091d8e8a1692b122216078736030bb335ad5c888e07aa1fdaa988611497706c49d3bed9606d4067769f0faa49e77c3336d4d875057967049a8e","ssdeep":"","tlshash":"63b092e9f16a24767a2a64b821764361692b60e3a8a42980c929139138a581790b18a2","size":121,"data":"","first_seen":"2025-02-14T11:55:07.052568Z","last_seen":"2026-08-07T17:25:12.660764Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5dcc0171393abd594a4dec26008bc6f1","sha1":"3558d10851da82b44fadf0abace7f8f55d503868","sha256":"166cafd629e47da401cbe34b13e841517b83637151df157ed7b80ef1b0d1c5cb","sha512":"9f99efa24f25fd322b1d78c3d140417de03f8cf98fe441d00d829a52f4f8b90419d37087ad96f7dcd95ac91613dca107b15115faf17ea7b0c98462b20a1e7140","ssdeep":"96:roY17Ady7lnOTowjNaOBOBOyOrO2OO1O0OOQO6OCOZOG:roYVAmNOTHaOBOBOyOrOnO1O0OvO6OCA","tlshash":"a0a1ef57f0efe11efc09784b9caa3581e10fe0cae297f483d628954462943166f369dd","size":4934,"data":"","first_seen":"2025-11-09T23:11:09.204093Z","last_seen":"2026-06-21T05:12:09.831395Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6a873ac2.f9f800de.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e709987cd4d0859d415df1d813092c","sha1":"71e0ebb81178d81d6318efca0ae7443e91bb4321","sha256":"f322a42ffa98e1e2cfe1f325cbc557af80b4a06b1ea738c8d18d58000ef6ed8f","sha512":"bd9edb3554ac2c39eaf1f90fb7e98ee4b96905c836438fc7220f59e66eda078b0056e487e3afb39e125bd86599553edcbbb8c12544b7c53b17b98879c014aa57","ssdeep":"192:+wckHfTqK0W6HpHTaI7K6g7GyFcmr7mg9i:gkH+JHTrg7GyFRriMi","tlshash":"abe1858df5dff8690655ed2512bf310bb2292da628785a12f730c9d17c6044ea2b1b3f","size":7303,"data":"","first_seen":"2025-09-17T18:13:55.461966Z","last_seen":"2025-11-12T23:56:07.319151Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"351b82691a84a991f4a5d1d95e0d2fe0","sha1":"2bdfe2aaa40a367233fe015dfdb5249dc6c816e7","sha256":"829fc37afb2c4b8ce9a3344335d8958ac18faaa48e7b643a9d072f5adca9bf7d","sha512":"f93d702a7c4855301f0a17bdbbf82e1375fccbd8af547fe7ba2c7c288aa512727c68354a401dff0c07e0631bea9a0442a90a35e311242dc41756d99147c426ea","ssdeep":"","tlshash":"7dc02bf20b774691f205e1902b2b1c4943a328be4c93cc70f378010a6ce25a5c1d084c","size":146,"data":"","first_seen":"2025-11-09T23:11:09.209338Z","last_seen":"2025-11-09T23:11:09.209338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0aa5b8.66495c0c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dc45d3b6d407867b15e48df70ab4f7f","sha1":"69a31e1d77ece2ca8c8b053340220ad930c70c2a","sha256":"619e3b22326e49e8b485d075b6f3d83267c58515bd8d48c41359fce703df2b63","sha512":"933b34143e0ff8c5a73c77a7d6bcfcde410154867ecb67197b01f1a2c46fe00ee3314439f0d862134032ebb95f61cafd65197de47fa8bb17fbdc1cd14c4f34d2","ssdeep":"1536:3LiBJNLhW+L2zrzmx6GSWq50EW3GraVDso2OyMru0EHgIEBDPC25lG46YPZVnkaK:WFVDsoomBq2YIheH","tlshash":"a88319ddb2cab06247a770b940af610ff236199d684d8400f125e4e9bc78a4e9277f7d","size":87888,"data":"","first_seen":"2024-12-02T05:42:42.192784Z","last_seen":"2026-08-07T21:57:50.433609Z","times_seen":1145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-572431ec.bd001eee.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c1bc55216c78da236d6c43e76d0bbea","sha1":"edfc33b800026a70c5ee2beb3b05f97a4dd6e75d","sha256":"072d2f8e945ed2828bc6c631c7160e289aefe58450639699bac6e3beac5fc01e","sha512":"b0c253d1d24fadd6bf61c8d38fe8a9423c3e1f62e254f3868f16e7344b18bcad76179d1e14b8d5a753301cbcb3b1087e8f7ed8a2845642cedff7f764cd8e7e2a","ssdeep":"","tlshash":"0161849cb8dbbfb30a410059a9aeb341b14a3c0689bf65d3f6fa9bd44b144d9413070f","size":3215,"data":"","first_seen":"2025-08-08T19:53:19.481529Z","last_seen":"2026-02-22T16:07:12.59479Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d21a5a5.bcc1ec47.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69975c5a53f22940e6d0bb4a89b6d6a","sha1":"23ffec31299ecf666f72c585efd4b46686c4e5fc","sha256":"763341566ebe5c6c5556a74b8c6bc2074c0ba0ed49efa4d2dbbf8a804e81127b","sha512":"6af14e1aaea829873074d2bb2c5aed00e2afea926481ddf615a5862a673aab487e1a8d769ab1d1a5dcd9a75eddc89f7a00acc6dc39c53ff834591c92d3ea1e10","ssdeep":"","tlshash":"c94164543899fcb103b96186602b6702b399681a6023f58ebfb1cfc57e62c93603643f","size":2091,"data":"","first_seen":"2024-08-10T23:04:56Z","last_seen":"2026-08-07T21:57:50.497467Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-99d68ba4.450ed15b.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bab78e624701cecc3f09dce63770ec5","sha1":"b5b42a2462d5840a0b17e03616308a2ffd032fe2","sha256":"814183a2f8d28e9255f342d219c8f86ff951615acfa1ff9339cb72641eaeda32","sha512":"d6f1ea79ad20586a22cba6d3b300673bfe5594a4e5fed83fea88fcbcfe4e602682a85ef01b38bac562cd65415b2f3f5775a8770dd6ccab61dd107c43f1f830e1","ssdeep":"192:CT/C5hn4gY4djfeUiI1KdtmUzDoOPDfxtGf3AmP:CT/wItmUzfbj6P","tlshash":"1602b844f5a77b3944aa61322d2bf21133bb3988e376f149bbbc9bd80f54949085139f","size":8414,"data":"","first_seen":"2024-12-02T05:42:42.144205Z","last_seen":"2025-12-22T03:17:12.225973Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-common.4b9fb222.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f7ba2c1018175c4cde2c45a44d2bbf","sha1":"70f4c7b9ee339773e0419e6dea9072fead6d33ac","sha256":"ca66bbda15520eba487d620863023de2f0c2007b0e91218ad5afad11b7675c1e","sha512":"f1dd1dc580405a9b624883934f074460ba80d9b5eab1d1b59a95ec67b3575840fc37e709d301ec0c1e7bf53f83eee660aae07e5747324ff682c9928b94b04719","ssdeep":"768:OAzJ7vb7aEFcD42PyQFlmy/uLUL1fG/SQPDkDl+jTYDrMweizaZoap7k:x5/a0y4T+/ugL1f4SlQ2MwTOZnI","tlshash":"2563989cf1c6f8a606ab3435563fb20eb5b739857456c1828b61e9c1bc387c96023f1e","size":69968,"data":"","first_seen":"2025-10-15T04:32:36.326914Z","last_seen":"2025-11-12T23:56:07.516757Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1217.cc/","fqdn":"1217.cc","domain":"1217.cc","tld":"cc"},"ip":{"addr":"103.125.85.149","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"introduction_type":"scriptElement","is_inline":true,"md5":"713cc343d789a4824ee1b495340412a8","sha1":"20cad67f048b47a997e40d205901ce8bdb07862e","sha256":"ddc7c3657e90fe02be5e3b5a195e25b08e8f44128db7c74003f20ed84c2c0e94","sha512":"1057b5cd418bc710bf52a0fd87017d41d383f5aae1c6fcfc05df5f45dc78264cbfe964de8ceae3f02889dd077271df1b52fab5830f697c5c100d1234a8ecf125","ssdeep":"","tlshash":"4b014ef3155dc917c36d82e37eb71eddadc67415eb2287ba5111f30da8451a06e26900","size":674,"data":"","first_seen":"2025-11-09T23:11:09.212224Z","last_seen":"2025-11-09T23:11:09.212224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d216428.ccd5c78d.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b31b5e049848b47b4cfc890dc2eaa18f","sha1":"1927e116754dbe44edd16ff5434303cc7f6b1eb6","sha256":"05dd4b865ef9a9905ae7b634bcbd73cc7bf39ed2dceb1dfd349a2eebb54904d4","sha512":"5924df01ca0639f69127a708c836ff7fa990e07301a8c80239e48633a968b3fb103fdb11e98dfe6348c26032d4b4214bcfbf6ba0107f9ea24854e63bbe2f86fb","ssdeep":"","tlshash":"f1e0686cb095e44919b3e8e1621b53e855678b16266a21954ae090c47d1828f5022aab","size":356,"data":"","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T21:57:50.451419Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2e292fd8.43deae73.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"accbe27de5a3efa271cb9c6b3064cd2d","sha1":"8af0fa873babc16118ab21ee1df5602ccf8b2b92","sha256":"4998e8da8d517bde27e016a2117e0e4315736a8f963786cc0493f130f0892d0f","sha512":"76856a36f71dc368022e1a70bd270381beff3935d6e9afb1503fe1ca118e593af3dc202f2fdbadf6f554ae694c85424bbd2b2fcf0a731e83abb2ed199d09e299","ssdeep":"192:/0/G81jFs9YsX/4fry4xtZRhAnULg7zIgmrDmg9S:RYsoSAg7zItrKMS","tlshash":"36d18388b4ebf4600059f92461bf310af36ab9a1645c6503f724c6d97e2449ea2b1f3f","size":6673,"data":"","first_seen":"2025-09-17T18:13:55.292294Z","last_seen":"2025-11-12T23:56:07.49675Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-81ecbb86.f395862e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78378590472c0d451e7e862404f377ad","sha1":"81ad577f74cb88f6728614f6750d8a4ac11c66e0","sha256":"d5edcd246966755e3a9876ddd4365f66de1ab0e17e47d011c1aa5474418da9c7","sha512":"21ea7f03c7a7248a45699e183bc8c56b62a7f72bda3feb053f67730509e7dbcdb8eb1670b8d57e15c08d940e4fb2e5ea9c3e64f2f6b6a25057817c894fc49bcd","ssdeep":"","tlshash":"376131997185343690ab838bb92b3f01b57711f87482b989b17cc9c4fd209476523afc","size":3423,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.403982Z","times_seen":725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-17b675f6.4cda0fff.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9c23963189861f099c2a761353311c1","sha1":"89d5f08618370753d3f3792c33b8d17e01288cf3","sha256":"bb3be2e402c38915bb3f256ceebc06e919e65cdbd893afa0647f3a63fdc0430c","sha512":"31359e90a032dfc4a08bc511faaddea79ee5ad3c42f3156a4c341a90e27705b3f3ffd4c31d2031cb73fac43dd466ef32944bcea4e1f93790c9df2bd041f6b5eb","ssdeep":"","tlshash":"c551524c75d6e89254e98144502ba785b32e2a4f0830ed5adbe1e2d3b960e4e417af39","size":2828,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.399391Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f8b1fda58a31b42bb1b9337db7682b3f","sha1":"6ca48afca591dd3e544e097837caad276d3b91dc","sha256":"fab327998bd92ba11b6d69efbf30c034b23830a17c7eb0bb95f5baaa4e20215a","sha512":"b73db2bf94bac9e8da84749f6f1726771694e6f72985ced83f19ace74904af89245b2e8ee60778e2655bf0da0fc537a9308420a8ceff88d989c1f817d6c2a4bd","ssdeep":"","tlshash":"cfb092aae59032063ef2885a6b1fea11b057008608089241494d8c00666a76aa276c8b","size":103,"data":"","first_seen":"2024-08-14T06:25:15Z","last_seen":"2026-08-07T21:57:50.5626Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ce29fc426d6322913ac12c9c07f9645","sha1":"6568739a80c33f3e9e72b07c836210188fab8a80","sha256":"f3f3a625ee219b17c99e61c29bfa76ef2faf3043adb365dc16ddbd7d8f6a796b","sha512":"e4e0ae255147d984df1db86c829afb6bee9459668f15f8407ab2cd8921fba95d90a4034c12af6de5c816840ebf2fbfb0ffde23554560ceed0a1aff25cef57ee8","ssdeep":"","tlshash":"5b41928a7544d0e4d6d7b2b28d5a8b00e19b726c3946c03422309ce4193c17ea7aefe7","size":2101,"data":"","first_seen":"2025-11-09T23:11:09.21372Z","last_seen":"2026-06-21T05:12:09.826614Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a1d1bb1b66d03d9085d48682a2ef490","sha1":"35f8e6c5ee38ed6767771ca52a9444a6fb581269","sha256":"2b0f664fb2d9c2b5ed39c2accd8edbbea78c03b292d8b35792e1565cfbb16664","sha512":"3b6f88515a39abd970d8853d069a97109eb727e8e4b4729c1f9b26b711decdf5f42ebfcabdf5eaa12ddd5422edf4652412b9b3ed7629437efbc969ae49f78d2a","ssdeep":"","tlshash":"4611068fe59d754cd17a8941370fba46314006231259b19712ae8f12b37be9bc0d2ff9","size":1085,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T21:57:50.56069Z","times_seen":1233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0519756e06352a54df74572b3d550a30","sha1":"4f98c3efc84e4353946b67ec077b7c6ba5dd3d15","sha256":"bee55d661106c4edbf0630dea681dd15b60cf2065e860781daeda8cbdb560ad6","sha512":"500841e1eb2ea01f2437c6f2d734528fc822528e9c2260c56a59dcfa82e7d96c0ae7badc2643960dada57a33f1edce81759a7d561fb42807b51f520c072416e0","ssdeep":"","tlshash":"7d21856428bee4b68d4eb102536cd732e61998f2c4e430f1b6b8ad1484adca0372c43d","size":1326,"data":"","first_seen":"2025-11-09T23:11:09.216175Z","last_seen":"2025-11-26T04:35:54.080627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3bf8b542.7e15c366.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a9aada4286da680e7121a9383717bf6","sha1":"1af2483ea53a02ba7307c561b5fbb62694f9748b","sha256":"fa9e045384a40b104326f6f503cfafa052af43abc21e43858d2016046af81ca2","sha512":"dc7b590a167321dc750e5793d68a251d4436ff0a2bc0d6535ec0a2c425674a01d0b4509ac3018d3ee2b591e1d4e45554cb53a7e7f9989657bbe5f647b70de26a","ssdeep":"768:3xfhcA5wOTQpz3y6DUs5jN1N19AT7ayn4P/ZWiogycF7pifbzSmpS5kqR9RGBh:rcawT3y6wS3NTAT+f/ZLo0iDzSmpS5k/","tlshash":"d3634c4a206b2077cab215a4192fe8197625a94a271c4d4cf3afc8f068f4cdeb177f75","size":72340,"data":"","first_seen":"2025-09-07T10:11:57.818652Z","last_seen":"2025-11-24T13:01:19.813817Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5bc6f1fc.f02dbf5c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79f784c0bcc2ecdb08fc8cebbb2d8e5e","sha1":"22be47571cd2107530a90be5add6e2ece83ad042","sha256":"e054233b8d328e238b0a2945dac64cfeb6d1d3d6e90279f132e85959b3934180","sha512":"83df53cc992ec1ee6e3da7d1b0f88a79ee225c2f231d8a7e28e4f2ca94404b0c68c5a101e608de59121bf894e1e5d000d9a7aea2d316ed269a8b67475077a9c5","ssdeep":"96:1xzXHp9flwmXNd9vXO6SJGzcrbHnDMBvZPbqKjjDCkuqeaRuQ7uEiPR:Lzbl7NdF3S+gHDMjTqKMta8EiZ","tlshash":"a4d1b679b8677e3b0951806a24bb71c171ae1945ad6d5463f6ffcbd04b2180b0336f1e","size":6316,"data":"","first_seen":"2025-09-07T10:11:57.821186Z","last_seen":"2026-02-02T01:17:12.771786Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-7addf818.fe873c22.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d52970844b45c3b675f8d31a6c1aad05","sha1":"fabb02c377a189c9d7f4a4b2985fa4892540cbc7","sha256":"31e48212ac6f262f5fe84026d9923ca60f1783eef4951885bd68ae1132679df2","sha512":"a62af0ff4755b66c25805bf2dd401a78bd52fa76a53f83e927f79f78e269695cb19e676c8431cc20612490b23fc39cc234359556fc9076a2a8d36632ed495689","ssdeep":"96:+C9C6VBWc71puAFZ0rDFLA0foAS2j7dIw66pAGc5:+C9IcJmtlS21PFY","tlshash":"a9916198b0d2a97409de04a128abff05776d794884e1bad7b7f5cbe0161098a4838b7c","size":4415,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T21:57:50.485957Z","times_seen":1186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a050dfafb6d7cf0f581d63728c86db26","sha1":"2e075dd0faa9daf1384ebb7ac83f5c1637b629f5","sha256":"47259bff49d44ef5cc081cd26b21c9575315544bef55889093244c7f4199ba99","sha512":"c05012a26c631e2d5adeb98d3e79ee0771156310874f78d73b597a4e7a9d0491ecf04264ce4b18dd4ed8d17250017adf541c8beceb5c17082b189cd397ceb8dd","ssdeep":"","tlshash":"f9e0689be300712762e2002c619c32036102abf79ac0261b193e6151386714520a2b4d","size":344,"data":"","first_seen":"2025-01-03T04:26:34.839206Z","last_seen":"2026-08-07T17:25:12.669778Z","times_seen":959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3d7f52ef.f6f1f3f7.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84181b4000640d252a76b5f28d6ed832","sha1":"07766c22fa2f93ecf0895b0ee850a199f861531e","sha256":"ccacfeccba4792678c2dd4488cc37bd63c3ae9f88ca6314d76ea8556361c9ae0","sha512":"44638f2a2c8b5d3da2401cc121f12cd92380523daaf7e988e3ff76192e436dba15533871e386dffa013236c89bbed390f70862a59dceb0ac7cb22f4073f12a8d","ssdeep":"3072:QXVMfYSq8kyb46d9G4qQ/WmfH76LZL+kkIZJSB:QafxkybDG4qQ/WmfH76LZL+kkI7SB","tlshash":"f0d30889b31071a591e72256539e810263b35855b90ad0e431b6c8dbacbdd9c03ffffa","size":136351,"data":"","first_seen":"2024-12-02T05:42:42.170191Z","last_seen":"2026-08-07T21:57:50.552429Z","times_seen":1134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-8761cd82.1bee5bb8.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e3dc5aba0c5026a516de7f55e35148","sha1":"ad7e8b54df7f2695377787fe9d14afb4ac419312","sha256":"fd9ccf2940d3baa1d18f39704453ab5bbec507df6a822c0c0fb940e8c8045f3c","sha512":"3b1d1cadf3e4d137c620fdc12942d9e598c90b85dda6d0feaa7c85ec72d4a152198e61a03c1708183100edc9bfe72ed301e14acdb83ff42c922ded2647671e78","ssdeep":"96:jX2rVBIQmODR+/E+SpPSYKOKPsjNxZqZu:rg/c+groPSHOb3Zn","tlshash":"b4a195bd7796743b00a7820ab15b6f02763b25096492b446f37ccdf46d205477066bfe","size":4957,"data":"","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.547521Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6b87d5c9.b48d1a60.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"265dad71bc0d2f627e768d23515a2e4b","sha1":"1097ee9f481837c936d5e60e692eca43424b73d1","sha256":"7544fd60b737be0b9d1a450f4d426ee96a8a1ad4b49592303a3a923d8d6599be","sha512":"e212e2de43591027fbbfd2c36ae227f4be094dfbceaff007222028f5a6876bd1d6610e4e5e6b766bae10b9dd5f2c4b5c0978e064fa0d294bce8b682884b98566","ssdeep":"","tlshash":"da416588b0bbfde905e292a1003f6646f25534186c39f255ebb0ede09c2594f0124f2e","size":2000,"data":"","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.556453Z","times_seen":1147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6a2a33e4.9f03e7d1.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a689faafc213b0ab26b733a19ca3c41","sha1":"18b17d826ab4a127c382d725a031c87b98626f75","sha256":"ec4b0cfaf0bd4798a47a919603208c50dd1159238ed5a66ef7b1ffb8d10797ab","sha512":"46612f5074ade1aa95c4f9831889064db740d6481e3aab420a30eb758b48dba4c7c446f9431189793085b540801ff9959b94b17293be91d5696c6f5c6fb7ad01","ssdeep":"","tlshash":"595195a4b682719e0de9004b74d73643a7bb04246d0e9bc6ff7890d8abf0548125932e","size":2668,"data":"","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.523825Z","times_seen":990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-vendors.3836852f.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"162e48b2d540bd0f62cf8951e1b2e73f","sha1":"7bc119e113300a1a4a1741c6b8d2887b06600d81","sha256":"2af6f3a3a0d88b3d45709184ed35aeefadfbcddec57d0908728153b3d2921c56","sha512":"dd361a0e1e12411967955b6a97c975a9314981d703c67178bf03ef171ccb9e301aee18bdd5d25906c99f1e3036df02897ac6240639a09fc28e7dd132258c230a","ssdeep":"6144:/hWZnyF2PM7Wu7jDRRXXXxzOp1LAK6xGZ30T0aQDqWGOiGxhMOw:/hWZyMPMiuVJXxapj30odGjfOw","tlshash":"5d94d68db2c6b0a513e730e4402f650ff27aa969b44e85d1e221e5d5bcb894e9137f3c","size":442879,"data":"","first_seen":"2025-08-21T14:51:48.355458Z","last_seen":"2025-11-12T23:56:07.459328Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-bd91ad18.766b9945.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b986df55aa67ff693d32a52f8c069f","sha1":"7c810b428db3fee618d878e4b318a91659471388","sha256":"249edf06f4e915809f0d2364d323d934b57f54c03da8a0877ebcf72277da617e","sha512":"c4d36f83ef40f4964f1d2421e840039c2235750b683cb58af27756cf0b4bde95859bd805639b04710f6212bbad18b3f5dabcae564b55111960e3d983672df3f2","ssdeep":"384:nxm6x4cHJiJ0YCDUHPynczrnnOsTZaH98a5H5JSgTXmRnFK563tnz1IY52c+Cc:xm6evy+0H5JSgTI3tnz1UCc","tlshash":"ead2d853c2176ac268fa2c057057b740f9accec482ad884b8b4345e312d7963e5b5fbe","size":29658,"data":"","first_seen":"2025-10-15T08:36:50.914022Z","last_seen":"2025-11-26T12:39:16.186531Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-e79c82a6.4ca3214a.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5a6e17d05febbedc9726069a8a1e9e6","sha1":"8fdd11d8952a0784302f6db992ededceaced9f78","sha256":"afa4dc9987d2baaee86aa07fdaf2b23847cdd5bd1713a9795f384f502091cb5f","sha512":"181056b580d90aceb7a97c4afa584d3049bd2607cb98b2415bf7c50951e8927f889f672abff7c0ba99ab43bbc652c57833d078255591907a8c45462fa5261ad8","ssdeep":"","tlshash":"6251b78cb1d9fab800e54042843f7306f2662804647be152a7b4d7d9da7459fa177b2f","size":2890,"data":"","first_seen":"2025-09-07T10:11:57.841981Z","last_seen":"2026-08-07T21:57:50.524399Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3d163519.c75ffa96.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86c634c0f1eccdba08f3c67535582cd6","sha1":"da969da9c6439468c82117afaae5a8038372de7f","sha256":"4b2e9c2b7112522fc3367a2ac2671ca2470361f5f8f9f2085b90c6d2adb440e6","sha512":"c2cef9e58367522d2ea444ecb60625d444e9a3f1da50bfecd2e28e2cfcac09fc79b39206e2e8b934c6eea06e2558e46f0562e1a05c9cec1d2fba7a311f66f135","ssdeep":"192:RLog0SJ+bWRYB0JtBNQrTs+AD9RFmflIpXRrDgFl1o:FjJJoOD9Gl808","tlshash":"a4e1b49d72c5bc64861621e1002f770af22b0ca6546ad85abbb8c8d15ff0a8e5137f3d","size":6992,"data":"","first_seen":"2025-08-21T14:51:48.303155Z","last_seen":"2025-11-24T13:01:19.798041Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-1e5e0394.873befa7.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5779f257964e052b99af6de1e3b809a","sha1":"64a344e878912b005e439bf5d850ec3a98983d5e","sha256":"2c7c91c537700e0f6fa391fc9c44c8815391fffb6471843c1c9ec7b88cf5af61","sha512":"22e2cec73d98378f8501d317207da80df904fab6133f4037def8dcff2ed3c5643b265140ad69a776d767d88f9bdeed0f824dff7fc191a43b94c95b7c45d18567","ssdeep":"384:UguREQpnHlEG/rlYHvXeD5+zyI41K0QpYcbAYY/1ekxyCCl3zm7d4q8LRlP:UguRHzlYHb0QCNY85xklj6dX8LRlP","tlshash":"73a2c52470b6edf54866c0d0702e2206a12e27551266e8497f78ded84f90e47b37fe7b","size":22281,"data":"","first_seen":"2025-10-29T05:48:39.566069Z","last_seen":"2026-08-07T21:57:50.481671Z","times_seen":842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/na.js","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"7476abb85ddad12b7d60dc0c0f3c8347","sha1":"b13117498fe9167823723561538266cb98d3b39e","sha256":"35cfd44e3068a513c29432ec900439d0905c096c11b7c49eff62438028cec6fe","sha512":"59c241e02e65c13478229b04b190e3cb1cef203a177d7fa52ad1555cbbdaf0f2c7ff77f9effe84943426024c73ac10bdbf7afbee5c085bbc57f1f49695ebbe62","ssdeep":"768:8xc5TDrE5uOVC9eptdECv2wt4cUxwQcg070gFJTb:8wT3GuOwYtdEBwtS9Yb","tlshash":"47d294c9f2d6f0a643e321b0412f270af23ba55a758ec8d0e625d9d16c7854e9133fad","size":30838,"data":"","first_seen":"2025-10-22T21:14:36.931739Z","last_seen":"2025-11-30T22:55:17.838688Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-c6aa0208.f2a073e6.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbf58f2261d5b17b82b036241883631f","sha1":"50b5097a9c864d600a791905c85ba619ffb490ab","sha256":"c24ff039ab1ab35d478cf74f327811164c9550ee80e86a1538b2f2b83964cf6b","sha512":"31b936a7a668dc47b4a798afd48a0135193f3cc70819c0e208d126b34227b68af0699eba024841d374b945f0cd25c6c249fd5f99df6d5b81d3923cea6de2c87b","ssdeep":"192:KOMPN5b6NBDtXE/h4Y5W2tdixu9EmMPpvPzSNQ9t+MROekMN9tiI9d:KPaNGh4YztdixunMxvLSNKROzMN9j","tlshash":"a802fad6349eada504d24913202e530132b82e3ddd6faa80bff0ebcd4e94d465516b2f","size":8580,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2025-11-24T13:01:19.729375Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"109bff48289ea0fdb6495399773bb7e7","sha1":"b9be0efe1ccbac50bcd0fa3fe69f29b1b493c010","sha256":"10149bbedff472a8ca52ae03d4ab6f381c1b7ce2d3e402962e2c0911e10da643","sha512":"10bb5d527497204ca484acc1d9cf52c9a53fa6accae050105c20e8b7594dd384d708ea97a51ad51bd6edbf23993599788dfb855348b908987bc069b8039b9847","ssdeep":"","tlshash":"77e0c0db7416087261df85b633b5e1247153660d78091c32fdfd88242f68687482619c","size":373,"data":"","first_seen":"2025-03-03T20:37:43.743922Z","last_seen":"2026-08-07T05:04:43.990582Z","times_seen":1043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/index.a644e26c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"096dc2ba7837cc96cb1529a6a5359191","sha1":"8938153eab9ee6bdfd44521f3b2872ac06df653b","sha256":"d52279e8ed5ab66f12ae8dde547ed95f609c1f081f8fe4085a975e7e71f52af1","sha512":"eaeb5432c2ed3033254a88398b800a285262d7172f884552474f28b19e0572edd0bb90398c2648b90686988101b262d76c28e9b011e8fcdad7091a8265395f91","ssdeep":"768:E2+7PxeXVXY4fQn023zYpgw4FKCo9v76wR6UK0Wb/Bd/bd84on:E2uxQE0AYp5Z76X7BhKFn","tlshash":"27e293b6e384f9394b916c571526ff63509f2a732d30b7b2536c92b053a08f90387c5a","size":33935,"data":"","first_seen":"2025-10-29T05:48:39.593299Z","last_seen":"2025-11-12T23:56:07.388677Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-4ad58d3c.f0a560cf.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b504017f3c52cc4e2df62ed0b6f0377d","sha1":"77137076d48ba806de50cca24b0a2a94ac919535","sha256":"29f6ad0c03af4d0d4cce9b778c6b0265a0539bf287f80611b76ac68fb7fd8725","sha512":"72dda4dd41d89b3422a481acd664722a73b69067cdb7b88fb6c25ebe8cafdf5822624114923355c1f1aba8a53635340bc27742458733e50d309abec139b53e47","ssdeep":"96:6dBdYPbpnK+IyJAV9DACdB7B8HOb7K620BuKXW0xa5pjPaEfqsuVmr7mg9QVlm6a:soTlKSJAVR/r7uI7K6JgQCdcmr7mg9F","tlshash":"13d183cdb5eff8a40165ea7442bf2107f3596d6a2c585946e720c9d4bc2404e62f2f2e","size":6328,"data":"","first_seen":"2025-09-17T18:13:55.272521Z","last_seen":"2025-11-12T23:56:07.402473Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5PQDSQV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48e36af804cc45b949b1f553a40c4b87","sha1":"c1ec73b55071268e5731d4782d75a0b40025e858","sha256":"fd39624aad6b311fe6d1bfbed713c64e77886fee064db8635fcd1fb2b8cc9e78","sha512":"4585db5d71718187305b65b88eca74a6faaaf34848d54355d2c1b25f9fb08e43f9572d267cdfc643c3595e4e30b8ee102063a68f9733b1f99681ad038dae1d3f","ssdeep":"6144:+Lxz4Xf+astDi46OZd0CdpIQmYhrc/XIn:yzbaMiEgYhz","tlshash":"9394fbcd728974b5c3a6aa31402f090e757d24a7b48cf851e0a6ccd42e7497d71a3fae","size":448382,"data":"","first_seen":"2025-11-09T08:17:45.973955Z","last_seen":"2025-11-10T07:35:16.599581Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3690af37.5e9e4296.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b714308d7254328c364b062f4b83328","sha1":"aeb6afad56be5f0275396cf85b02de0d0e0487c6","sha256":"445184f0141ec123fc370a27678fb6f8442b41c694fdbb9d3d050aa65e1c487c","sha512":"bbd3bd69efb75baf6de3afe4374b5bc83a997c05ab386145d8867f0603ea2a68139247b34a1c3dfac03629da5f6da438db86b92185cb106e4cf29875cf50dcef","ssdeep":"192:M0lu3u9RmTAawE5zY9F81VNbn/5ZZnVMm4PuGxjLSpqyEwtKV/qR44RZ6fQjZ:Nu3u94gEFY9i1V9BnVMLBL+EhhyxjVjZ","tlshash":"3e62b6cdf3d6b06403d7bab0a12f200be2776559b84e8455e224e5d1bc7a54e6227f3c","size":15118,"data":"","first_seen":"2025-04-10T03:02:10.994637Z","last_seen":"2026-08-07T21:57:50.549686Z","times_seen":1089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"eval","is_inline":false,"md5":"268640b95907e98483ae0a57cbf5e995","sha1":"6c6a40f680816a6b5ceaa9b25eea730cb02eae80","sha256":"42fd579510ef0f72aab37217c0270be32a258cd24b8001db594cb575a85252a7","sha512":"732162cb0873b0ee410433fc62606a055f796607548e2eb167bc0ee78775cfc2eb92dc4dd6ad30c2616bf3669cd86c28b1a0f412be62ccc996ff664da2d903b5","ssdeep":"","tlshash":"e4b02b9cf08070240456410831ba2008d6b504510c2d2408a005246032604050801a75","size":117,"data":"","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-08-07T21:57:50.563056Z","times_seen":1233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"eval","is_inline":false,"md5":"b56d311d0bfaff45bee33ab8f1ac4418","sha1":"0288f7f592aff41b43924eefb776a072a1bbf3dd","sha256":"13082f3b504a34cf71fba150fa264d63573899b65da2c5888b4cb1c594acaf5a","sha512":"4f1854ab12c84d78d7682b83f216c84bc9753e778c20cf707565745897f56b40418779589683dcd3b5b915cbd409a4d963aeabddda73bba873e0b59a1e01d104","ssdeep":"","tlshash":"2b11af0ef3ed452704c7f4126441f129d1ab6a8b2be0251623361ef8911f2cb602b6ae","size":897,"data":"","first_seen":"2024-10-06T09:14:06.545653Z","last_seen":"2026-08-03T03:49:28.115181Z","times_seen":1127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e99dd35ef5aad734bfcd710abaefd07b","sha1":"efe512e938ba9f67564091a1c156aeb99312b13d","sha256":"14d01efdd6d3c2a1c18c97f2ad4907a780a888d6ddf8442e5a9f19c6c2845333","sha512":"bd93c04f36966891e4abe59d499bf513daa7ebdbb9136362e4be1139da6a7ac171a9ce4d5b994efc254cc2e9f079bac8bcfb268717f4d0f60753c6c035d2c6a2","ssdeep":"","tlshash":"79d0a90ff3c9003709c77046a0b1a118b1a78aab0bc45a2023731cf85f2e2821155bff","size":222,"data":"","first_seen":"2025-02-14T11:55:07.053864Z","last_seen":"2026-05-23T18:22:23.033897Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-7734e6f3.47b0b2c0.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6a6ab937652a82d365f0081dfec595e","sha1":"ad200cd06b661998965f61445954a4e2623902f4","sha256":"15fc3d651165f86b63629145b133172a62dcdcc137fdba5c866ed57a30be9705","sha512":"70a794a12f1c68afc6254076959dda1a14317f97045d139c837bff848cf2e7e9335169eab3fda3057ff10bb664743acdce9e750c4b987c78250c324901d00372","ssdeep":"","tlshash":"3631440875d6fdfa00e98186003f6703f1296d089921f159fff0e9c6ca1428b9135f3a","size":1835,"data":"","first_seen":"2025-08-21T14:51:48.27447Z","last_seen":"2026-08-07T21:57:50.521188Z","times_seen":931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f8b1fda58a31b42bb1b9337db7682b3f","sha1":"6ca48afca591dd3e544e097837caad276d3b91dc","sha256":"fab327998bd92ba11b6d69efbf30c034b23830a17c7eb0bb95f5baaa4e20215a","sha512":"b73db2bf94bac9e8da84749f6f1726771694e6f72985ced83f19ace74904af89245b2e8ee60778e2655bf0da0fc537a9308420a8ceff88d989c1f817d6c2a4bd","ssdeep":"","tlshash":"cfb092aae59032063ef2885a6b1fea11b057008608089241494d8c00666a76aa276c8b","size":103,"data":"","first_seen":"2024-08-14T06:25:15Z","last_seen":"2026-08-07T21:57:50.5626Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-90f8b594.3ad23e5e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f40d4cafa61e5d577f4d427834eef69b","sha1":"b6c1508c7c3f153ad569eaf095af4b5df2e6f656","sha256":"508d1a1b86936a0e6828eb2c8089d88a548502f0f214f337b0801add466158ac","sha512":"ca2d5703b3073c2cbbb19eb8b9f95a3effae50633b89332074bd95fc56fc4eaac888d20d8fdf8eb826255c984e74ce2998de103922d7d0aaef4e10744527adb9","ssdeep":"192:eRbaq0HJSIhRYmEJc8NO3soFnNTlSTqKnOCFqdZ7Cr7KwXT5q0rcmr7mg9Bo:e5uJtlnNxIF07x0rRriMi","tlshash":"9e22b78df2dbf8954766a665107f320ff22a19a578588806f236c8c43e6044e6277f3e","size":10764,"data":"","first_seen":"2025-09-17T18:13:55.341972Z","last_seen":"2025-11-12T23:56:07.468165Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-b5719a9e.5e91c4a8.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a87a09d32204c4825592e3c1109c663a","sha1":"1ccc05a828fa3989d7c3f627b66d141017ccbc8e","sha256":"6df9da48f80894dc881fa669bec8965cf74d99595e41371c7325ad1133abdffd","sha512":"3d1e3e40d0ffbcd20fff0abdd94d6295af6fca9d026892c25f4531833776f463b01d80a6756b2aa3dd8d0f7a3daff97a5709ce2dec94e0b817fd609d17070163","ssdeep":"","tlshash":"fe51f949fa45f99700f24191882f6a27f2652b08742bd0067770ddc9da244ef92bbe7f","size":3014,"data":"","first_seen":"2025-09-07T13:01:15.210197Z","last_seen":"2026-08-07T21:57:50.517638Z","times_seen":844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1217.cc/","fqdn":"1217.cc","domain":"1217.cc","tld":"cc"},"ip":{"addr":"103.125.85.149","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"introduction_type":"scriptElement","is_inline":true,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-07T22:25:03.182908Z","times_seen":229025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-21aae442.b344b50a.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10f10f36a61c42537b730c5983bea352","sha1":"de316c07a9503d2a2e617e2372b0fa8b86f8089d","sha256":"eef0ddcf17835b58116907cf71d4b724b99f9ad30a31e8347f65662568655fa4","sha512":"ee84c33342155749c9ff687e599e5e260d85c2cf0848a94a2c44443fa13c2010a50a1ced477ad232d9c602dddab276594fade885111aed3a2f834b41339f4cee","ssdeep":"768:g5Cn484GbMTDGHgd09zhCpJVkndfbuj+GvgcYm56A:grj9TDGHRhkJVkndTuSGvgcYe6A","tlshash":"5813a8a9b592fca905f221d2233ff702f12b19966476d000d770dec1bd3498f9226f6a","size":45266,"data":"","first_seen":"2025-10-29T05:48:39.589653Z","last_seen":"2025-11-12T23:56:07.350016Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c5a937b247e22f173c1b21015da9c3bf","sha1":"03014f467eef2d472344bff0e9452547675f5688","sha256":"ebe3a7dd96bdb9d648c0970037d8809c95a49b7e9342fb35bbb94d3b5b7dedf8","sha512":"b215d64d8efbf14186e868fbe2fd316bed573ea2d174ef650f75b05c324b513cbcf9ca6fd7d1feffdc27648fd8a09999e8e43261bb6702326c1d79bf798ab46d","ssdeep":"","tlshash":"d3416b6100bff4b69c0a7452862eba74e80a59f69027a1c6ffb8cd2856dc9514f1c23f","size":2381,"data":"","first_seen":"2025-11-09T23:11:09.227815Z","last_seen":"2026-06-21T05:12:09.822084Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-765a6c3b.e6e0dc63.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"655ec09258d8943aa140b70db32e8f9b","sha1":"c55bd0d461c23ded78d865f1a0b3938c876c4b4f","sha256":"82b0604c639ad4566ee159cfebef0a257fa533230428d77122f853c10fbd24fd","sha512":"68a0c5921e523780877b019496ebe6235c98bd49ca9ef0126cdfdcc73fafb10c4310fd084784187bd731e615dcb734546c956424efa20a4b0eb8358ae70e1b3e","ssdeep":"","tlshash":"b231464470adfddb04e5a392183f9347f15924096c36f5829bb0eac0981494f6572b1e","size":1658,"data":"","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.376034Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0de124.7c2020e3.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b947aab92696ebd83b764a3f85812a","sha1":"f9059cf2f330002491bb75dd629811d497467631","sha256":"48983c18eba31150e4fcade6801299b6caed40db59cae58db55cc8cd5caa2f12","sha512":"beab7b37e1866c2f579263eea46189d6b3eba21bbaa2477799e676fd8fb8a3bec5b58385838284f2c1ddfe22fdd50492be9082be3da11480b90f404206b2e36a","ssdeep":"","tlshash":"1bf09e74700efc7b2df5c5462527334625de240e5a3f26e99bf045503f36dd1862024e","size":500,"data":"","first_seen":"2023-05-05T23:00:50Z","last_seen":"2026-08-07T00:49:02.456423Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3796fae5.dbd6a915.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65029f6df9da220449a01d92ee7d806f","sha1":"6a6f05e1769c250153ae5299a1fcfebe882a30eb","sha256":"6c7eec28657443b45ce7c919af59ea26d89105dfdd4fbc0937486771ccb4f844","sha512":"8b8a962660e3c26c55b1e16e93c86a05cbae066335ff706b89ef9461a3f1d995f83eb98a4674a4160a174232940af17e34d433a6cf308a0d24a3f785babb74e9","ssdeep":"96:GIgm9r0GSVWN/tzf34/Qzyv5Q4n4M+7pZmuP+v45shDr1+4Na+L3mbK0wl5YmJdG:GIOib+5Q/rPK22l/NplrUg4","tlshash":"f502b42cfa936f6985ab410d24dea5e470a359c82393c009767f86f5dbe2d29310177f","size":8254,"data":"","first_seen":"2025-10-15T04:32:35.435027Z","last_seen":"2025-11-12T23:56:07.389817Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-4a97e788.9f237e2e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04de38d21558f99d92ce278c245d7d8e","sha1":"13554cce1673501ea6e2f7965de9e9cf1d9447cf","sha256":"7bd3193421a4cee6d14490e3b4f0ad901f8bb6c572003c7a674623b1d06cdb65","sha512":"27bc3c8ec80e770fc054ef23598dcfe61c62afcdd74769353617951502bb82997a441be6f961f2729cf0e0dd6f290685faa4bddd5fd7dd964ef4ae4a0f271be2","ssdeep":"1536:Lqf+W8PQn5BKZEVIjVjesioG2D/qLQe5KpOvPAWCP9RoLDf:Of+A5YZEUxa2D/q/ZmRcf","tlshash":"b9b32bca7211605105d720ea547f0a43733799b9b40a8a1cf299c5de3d2dece22bbf76","size":110998,"data":"","first_seen":"2025-09-07T13:01:15.189434Z","last_seen":"2025-11-24T13:01:19.744769Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5e3dc5ce.fbd16d48.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"613d33f2b1e5ff05ad32eefe32a85fed","sha1":"3ccb798c9f54288a62ad263177962c23aee2c6bc","sha256":"d70b22fa2807398f2f760f40ef8e9eaeb6adaa34cda258da7fd2e5349042e073","sha512":"8c298bfd9cf6e1aa8e8e811d87a9008a01f71ea2b631de7818c4e73901943890e2fdd4eed7c83ccaf474966368688e267035ede6b4ae28370c28127ca6d18ecc","ssdeep":"","tlshash":"1c41526570d9fda714d481c2643f7703b11a240d543aba8ba7b0e6e05c5094b5535f7a","size":2303,"data":"","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-01-12T01:04:58.337768Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"119936ff2b4c8a074fcb9faa819f2117","sha1":"6a5046d0f1bb9ed54bc14d7d463e285023d37752","sha256":"25f60887cf744dc1fe8e07b004538ffc5be5fbf59f039120505c624f83676960","sha512":"cff3b4972227b57db6104d79fc700e43a96b1044a19e6e9ef3af2690516a47bdcdbbca159507fb0dff1a8e0d2047a72b018c705f27c437299435d65ca4f5547e","ssdeep":"","tlshash":"2ed022282091943c20a70038223f22882010896286536b49382ca3a19f2184e4e6503c","size":203,"data":"","first_seen":"2025-03-03T20:37:43.751033Z","last_seen":"2026-08-07T05:04:43.991178Z","times_seen":1037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/js/website.js?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a3a751e2f0dc57847b31161ed36bfcd","sha1":"c0102dac903815a14493a9342ff1469aa65a43c8","sha256":"ec6ec3527993bd91cf48046c1ccf6ae5e789bffdad3db00b4b86f8bf68d93d5d","sha512":"850aca560f7c1d7c2d55f2fc7ae5b9bb1951a1412596ba3f2f7302871c2c3fb7ff63ecd1bdf6a79c0ee6f64ee57b0135ec4b15fbcebed3e8c1d8f6beeb858a63","ssdeep":"","tlshash":"83e09a6c329024a520b32172b86e30602f087496c807b4a8b4f6ac8c0e0e2b0f95230f","size":362,"data":"","first_seen":"2025-11-09T23:11:09.147823Z","last_seen":"2026-06-21T05:12:09.72464Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"05721997a55a746f0f7b4c96305edd38","sha1":"a65dc6a51d4bbc1514a6be5cf50d9382f03cd3f9","sha256":"be8d436b626d663fa57c9f674544fc676c7f059cbc8de62b0207b93b0d857951","sha512":"4164e8d2deadb17a2eecdd54552c381156e7c86b552a8fe97f67f4918f97317749f7fcf1ea7ee67f1ef589b1b98b4af6d4869dc7e33c0770b3d467091d19bb70","ssdeep":"192:rh9BHXRzTvmWDU7cBRyTBOGmyiBOElTWqkWVipJxgke68zvVHD8URDvT:r1EOxOF7pJikjR6","tlshash":"ebd1a6cbd07d92b6dc02b912524b6b71580d5de7c4f679a1b8f88c00189daa0a3bf17f","size":6664,"data":"","first_seen":"2025-11-09T23:11:09.231692Z","last_seen":"2025-11-26T04:35:54.078617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5747b262.d02962ab.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50125e0514a85442eed0737ea53a6ac5","sha1":"dda6a2ef4c9049a1cd35b91e70212b169d17d39c","sha256":"3e5cd9c881a8ce15b954f23bcbe39cf5c9b22b8eb1bd8a91a69cc7535d8f7251","sha512":"9b369239168fa6f9aee5b99d98c3da2fce7a173e1f7d8ed437b4747ee01f20c6a64b65344150e3d3602ace7f11a68ad06fa3317c2aa0cbb74f340d0600f9827a","ssdeep":"","tlshash":"ce71d818b04dfceb0ed25153346a530662a9221c6a6deca4fcf1e7d04f54a866232f7f","size":3726,"data":"","first_seen":"2024-06-10T08:09:48Z","last_seen":"2025-11-24T13:01:19.811906Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d23773e.6e2c8d6c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb735e11cc52b689b419dd46f6eebb40","sha1":"93f386f3c4a03d2c90c1de4c9f9d7be82657203b","sha256":"ff3cbbb429681da2510e9c07b170baf2aadb4b9b8a50ca32c15f43262ea47da1","sha512":"ce4507d3a66e85f95c442124986bfca653ab3e97a0ba0f44d986ac43387a19cebd23a27b8f41cdd90f053d6aa4fbe52b6856c78d41008a95b28e8a06b6b33b19","ssdeep":"","tlshash":"a90149ae4530b9be84ff2288622a968907d315a63931d4b064b14c30cafd7c80693b8c","size":756,"data":"","first_seen":"2024-08-19T12:58:59.20643Z","last_seen":"2026-08-07T21:57:50.496368Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"31fbda04fcaa8ec6d41ab75d0aac62ae","sha1":"8f6a6f62d607e8e0826cd31f019e3ed75d03175c","sha256":"5de8b869ef0eec94ad0bb0f0783b585305b43e4965a4bbcddcc81af4e3173ba2","sha512":"4a841e1a808881bd8509a381141a1ae099e3b4bdc01ee276f1b2aab5b3084910d7a0ad0c7bff30dbb8ba4effd6d6f32980e902457ee2665fbf70d9b1db7242a7","ssdeep":"","tlshash":"3f11900bf3dd092704c7f4136461f128d0a7569b2be0251627771df8921b2cba0276bf","size":916,"data":"","first_seen":"2025-02-14T11:55:07.05946Z","last_seen":"2026-05-23T18:22:23.028671Z","times_seen":712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"fcaa64d6bcf0c1b472d82e7af99c4163","sha1":"7ddd1a9932862dd8159d05e87500c60479022072","sha256":"e8a7c28acecc36bef21c513556962fec8dc38fe3290978798d84cdaa149bc008","sha512":"fff91960b59c9ffcfba80f281f840b63deb26a06ad2dddecef56ae6a08e9fcf41bc6cf5548d7e1dc0d2dadc1211a9c78285e2ca87327c08afe100142cb2b490d","ssdeep":"","tlshash":"98a0220cf003a000030320b80a8a83000233e0308c0c888080820ac0802c0bc003bc0e","size":63,"data":"","first_seen":"2025-02-14T11:55:07.060609Z","last_seen":"2026-08-07T17:25:12.671732Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/cl/js/ubauthsdk.min.js","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae5a316923f0ee6e245bc6cd49bc591b","sha1":"e25669654f5a67b4bbe44b56d8f0f67d83f63633","sha256":"05205b9edf6f283d2b8f710a15494a99334e46ac317f58e72aadd4b8df2ceead","sha512":"9d9e479f23dfb26c84648675a478ad69d9c70e03d48021402c1510f9a90bb609724958259167ed5a059befca7bb623e389f5861f424c214ce58b51b9b0770c2e","ssdeep":"384:FfXT+TGVREJrTl5tzDdh9kl4CxiRHq1sHBThXxVWk6ZTXbr3fr0iensSuDXq3lPf:hSThqbxiRfTxsVSUkLhPa1iD01+","tlshash":"9503d7c436d6b16a43eb76a0941f300af238fd70590ce454f611f8a578b8de9c66bf68","size":40799,"data":"","first_seen":"2023-03-13T09:31:10Z","last_seen":"2026-08-07T21:57:50.482431Z","times_seen":1220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-12091afc.4b614e5d.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"604957fa0388a0213ea9ab858df982e8","sha1":"1c1d1c3cd1a2c477372943d6e92a026196220f89","sha256":"681889a633ecf26cf745141bd4d49a062129f8d4b05535418412bfeb3919c3b9","sha512":"0b9e8994e17a0f14c45a352c26cbe3c0d08094ee9d119fb88285557e95110269601199a15d6193b30a69830c7d582c824aa7b90f1332cbc804bd052ec4f6e45e","ssdeep":"96:juCa4aOOl5h7QznzebLb6aNaubEc7aSzHaNaBbEc7aSz21BcP3bqKPhCYb/q8M2X:juCBjOl5h72zebLb6gFbEcrHgMbEcr20","tlshash":"20a102a87095b738886080127a3b76c5b3e97b1ca72fd143f6fee7a44790a441d2172f","size":4854,"data":"","first_seen":"2025-04-10T03:02:11.040645Z","last_seen":"2026-08-07T21:57:50.504404Z","times_seen":982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"g4.cldfvn.com/stc/images/static/element/ad-right-down/icon_close.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /stc/images/static/element/ad-right-down/icon_close.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/build/css/chunk-e79c82a6.31ec71c0.css\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 815\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 02:59:28 GMT\r\netag: \"68ca2410-32f\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 2249957\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe3a9e6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"a0916cbc5011bb59e07ef4c4922141b1","sha1":"9568129d49bcd7178b5844a154904b068d1c3b01","sha256":"5af4d789bfcc94bbb24ba512b8624f2346308ad118865dee019cce86a60b8399","sha512":"84c9443499786bba42d33b75e49426608e4194782d9c7c8ffc8b60ace4cca3641d7c7005f22295f2b55fad0a169028c8dc0f9fcb1db4c113a5461bf10f99de7c","ssdeep":"","tlshash":"4001cae970028cd9845489f58632b01a74634f786bf5055466cf52dde455320cf74d76","first_seen":"2023-05-05T23:00:52Z","last_seen":"2026-08-07T21:57:50.554975Z","times_seen":1206,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/mobile_h5.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/mobile_h5.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2879\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-b3f\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d1b569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"cd74f437df14c274f652f3b522d7ffe7","sha1":"e3e318c6448074e9a2aeb4277f8c5f66e37fb1dd","sha256":"6392cf872d07eb4ec3f970cbb6d935ecafc8ae2e87e99b72d2552b723fdf7dd4","sha512":"e8d1010845baa142f25c845444c7fd8269851fab82221d1a00016abff86ef99b216f801a782d0681defa2937309704d4c2193b168f449d0f797610b015f4e9d9","ssdeep":"","tlshash":"9f514dfb6e285bcbdbbce9974da4080a924009a7240381fd4da8f27015187fc0871b76","first_seen":"2025-11-09T23:11:08.846233Z","last_seen":"2026-06-21T05:12:09.68012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5e3dc5ce.fbd16d48.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-5e3dc5ce.fbd16d48.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 853820\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-8ff\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe91d7e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2303,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2303), with no line terminators","md5":"613d33f2b1e5ff05ad32eefe32a85fed","sha1":"3ccb798c9f54288a62ad263177962c23aee2c6bc","sha256":"d70b22fa2807398f2f760f40ef8e9eaeb6adaa34cda258da7fd2e5349042e073","sha512":"8c298bfd9cf6e1aa8e8e811d87a9008a01f71ea2b631de7818c4e73901943890e2fdd4eed7c83ccaf474966368688e267035ede6b4ae28370c28127ca6d18ecc","ssdeep":"","tlshash":"1c41526570d9fda714d481c2643f7703b11a240d543aba8ba7b0e6e05c5094b5535f7a","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-01-12T01:04:58.337768Z","times_seen":310,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/element/login/notice/bg_gray.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/element/login/notice/bg_gray.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/build/css/chunk-3796fae5.7302a3fe.css\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2802\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:45 GMT\r\netag: \"66c42f2d-af2\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 368305\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbebef4c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced","md5":"d3e50112f71e02903b744dedfe12b438","sha1":"a0785275f211b0967d778cc873bccf5b8e1c1874","sha256":"5080963c7a0d55c0dd5554bb619a6a46d61c408bd2511842f8fe12b11ec5120b","sha512":"676786173ed77d5fda000917b884871ae3d613e7b78b35670ef08a0f9406f1e00e5fff5c0cb67c83be93f0c74a5528834e10e2c67a02cb8e9ce004ea119b58fd","ssdeep":"","tlshash":"33514b8c9451491a100e0aaa356bde064a2be694939d6e1cddfe830fc630d513c75b5a","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T16:26:41.288501Z","times_seen":1145,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/element/login/notice/list_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/element/login/notice/list_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/build/css/chunk-3796fae5.7302a3fe.css\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 503\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:52:45 GMT\r\netag: \"66c42f2d-1f7\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 633889\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbebef4d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 32, 8-bit/color RGBA, non-interlaced","md5":"969a020c04526f17b0b6b669557bd885","sha1":"21b537e8eb47b2bdfe3a6c7bcf3213d749a5fcef","sha256":"40303c53e2d8a04fed01e93b04e098dc55e510b9e7750e76b9625b1a31d50a0c","sha512":"18e9e6a3aa4dae6c0d71fdfc8113099a4f3a515c43b6863fb46504568a6825652d4c01ad97e86be3af073bf7e6e4b9e06bd2a143588379f7a3d8fb974ec850fa","ssdeep":"","tlshash":"d9f05cd727748dfcf101d571517bc403c4d3f591c4115d18154c98510c0d49ca3f6275","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T16:26:41.305011Z","times_seen":4171,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:28.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:28 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2168,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (2168), with no line terminators","md5":"698ac7e2adec525be7505271a9cc7387","sha1":"d7bbc7cb7a6e5abe0abb04bbffe3ad0a5085a7f8","sha256":"74e859921ee332a3074b282cc2211cde9ea4a16f6186f5b85adbcafb9a0e0b1c","sha512":"a894bd53e9ae0ce2f3373af35d95cbbf29491d4d37ed679c55e1817a7b03e5187fd2f997e4decbf286c78c998f5ed9b411ea7ab96c445dea3a07fb3a90b6f14a","ssdeep":"","tlshash":"00410b0d60df3786ee81a5588764c129aa82118e2dcccb4f22925adc95e86bd5d4c633","first_seen":"2025-11-09T23:11:08.849118Z","last_seen":"2025-11-26T04:35:53.873144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2e292fd8.43deae73.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2e292fd8.43deae73.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-1a11\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe58b11569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6505), with no line terminators","md5":"accbe27de5a3efa271cb9c6b3064cd2d","sha1":"8af0fa873babc16118ab21ee1df5602ccf8b2b92","sha256":"4998e8da8d517bde27e016a2117e0e4315736a8f963786cc0493f130f0892d0f","sha512":"76856a36f71dc368022e1a70bd270381beff3935d6e9afb1503fe1ca118e593af3dc202f2fdbadf6f554ae694c85424bbd2b2fcf0a731e83abb2ed199d09e299","ssdeep":"192:/0/G81jFs9YsX/4fry4xtZRhAnULg7zIgmrDmg9S:RYsoSAg7zItrKMS","tlshash":"36d18388b4ebf4600059f92461bf310af36ab9a1645c6503f724c6d97e2449ea2b1f3f","first_seen":"2025-09-17T18:13:55.292294Z","last_seen":"2025-11-12T23:56:07.49675Z","times_seen":142,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d21a5a5.bcc1ec47.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d21a5a5.bcc1ec47.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-82b\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5ab41569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2091), with no line terminators","md5":"f69975c5a53f22940e6d0bb4a89b6d6a","sha1":"23ffec31299ecf666f72c585efd4b46686c4e5fc","sha256":"763341566ebe5c6c5556a74b8c6bc2074c0ba0ed49efa4d2dbbf8a804e81127b","sha512":"6af14e1aaea829873074d2bb2c5aed00e2afea926481ddf615a5862a673aab487e1a8d769ab1d1a5dcd9a75eddc89f7a00acc6dc39c53ff834591c92d3ea1e10","ssdeep":"","tlshash":"c94164543899fcb103b96186602b6702b399681a6023f58ebfb1cfc57e62c93603643f","first_seen":"2024-08-10T23:04:56Z","last_seen":"2026-08-07T21:57:50.497467Z","times_seen":1139,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/logo.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/logo.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 25064\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-61e8\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe71c32569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 168, 8-bit/color RGBA, non-interlaced","md5":"485f7fe380db37bcc69f18cc5d268d0a","sha1":"770ff0aeb9638562ab27ecc42140eeda43a06be2","sha256":"beb4297b5040d68a058b4e14ae3dd88e138ea7eed7bc7cf0843512a2d6227a28","sha512":"7b31dde556914731d3c767fe318584f0da3e083d5f208162e278cb536c7faed5fe8778c247ce88f42d4bf8688153f7a2d53c2116fce1130394c4d1b5a7063ab1","ssdeep":"768:owL0edLAQM17WSWzFAi44R2g4u85uBD82b:ueYpWSWzFA7F5uBDnb","tlshash":"7cb2f1f4fbc80926655b72cb6a45826a513233ba4026df03c96c85617e8dd72c42c3ef","first_seen":"2025-11-09T23:11:08.850991Z","last_seen":"2026-06-21T05:12:09.810173Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/first_service_title.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/first_service_title.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 10531\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-2923\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d2e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":10531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 80, 8-bit/color RGBA, non-interlaced","md5":"f748efb84283db5c0b34e07150bff739","sha1":"9b637992d2be6809699917de9295584991c14be0","sha256":"323e4a402b1e19dfcd00fbd6948f00fd206837152c227092b31e16c1ae7b7925","sha512":"2a70827f8248da60b0b7d8bd1008cc1efa61515bf92c6eda3fdca84eebc172551251ea8dcb405b3acf08dc51b6fdcba879515761bf11418ee8ba83390981a723","ssdeep":"192:k1v6AlXUTjY20S675AwGBT/AhmZyCHB/LX8OrElDq9pfbH7:k1CRQJGlBT/AkI82Jl29pff","tlshash":"ab22be926a38b5e67d9f5586bceb28076bc333905480973d9a7a3a43dc3d040bea0281","first_seen":"2025-11-09T23:11:08.855131Z","last_seen":"2026-06-21T05:12:09.757093Z","times_seen":3,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3d163519.c75ffa96.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-3d163519.c75ffa96.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-1b50\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2b96c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6992,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6960), with no line terminators","md5":"86c634c0f1eccdba08f3c67535582cd6","sha1":"da969da9c6439468c82117afaae5a8038372de7f","sha256":"4b2e9c2b7112522fc3367a2ac2671ca2470361f5f8f9f2085b90c6d2adb440e6","sha512":"c2cef9e58367522d2ea444ecb60625d444e9a3f1da50bfecd2e28e2cfcac09fc79b39206e2e8b934c6eea06e2558e46f0562e1a05c9cec1d2fba7a311f66f135","ssdeep":"192:RLog0SJ+bWRYB0JtBNQrTs+AD9RFmflIpXRrDgFl1o:FjJJoOD9Gl808","tlshash":"a4e1b49d72c5bc64861621e1002f770af22b0ca6546ad85abbb8c8d15ff0a8e5137f3d","first_seen":"2025-08-21T14:51:48.303155Z","last_seen":"2025-11-24T13:01:19.798041Z","times_seen":182,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_lottery_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_lottery_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1905\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-771\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d2a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 57, 8-bit/color RGBA, non-interlaced","md5":"0be214007d7c92dcdc04f908342f039f","sha1":"4caef028de3fe598bf15d9a95f61b10a70b59005","sha256":"e26d8a8f57c3c002530f7e0741191abe89625cb6f60ca6011a3eb1396e55b0df","sha512":"a6b821b8cd981e4a0088f63ffc5114ffd2c489da5949de38578bea1cf3768e26059764eb54491bbf89ddb19a45b13af7b081e18ad14125da7e42c6878f376c00","ssdeep":"","tlshash":"92410a77e1f51c6a1b665284e16f13f2969a39c00062defe4d2600e0f69e21951587ef","first_seen":"2025-11-09T23:11:08.856725Z","last_seen":"2026-06-21T05:12:09.696388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/brcorner_en_150043383823.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/brcorner_en_150043383823.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 21695\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 19 Jul 2017 03:10:38 GMT\r\netag: \"596ecdae-54bf\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2366946\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=cMKRGFaWAaMs._SDG08fSPFpNE64FXd6sVwKLyiQKss-1762729831.811275-1.0.1.1-q2mSiuPK1QGaK4DpWcbEMhall3DkWLxk0zVKczZ0mhE; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe8cd4f569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":21695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 48, 8-bit/color RGBA, non-interlaced","md5":"aaf1fa33cc85041889079005dd1666b4","sha1":"917b968fe5eb22014de64705501a65bc799cfc80","sha256":"5778bf532e71096453b20520d0a9b905b200d4cd64d5b8517decdc361526f4f4","sha512":"942e262dc042be77712a6606670295eca14391ce8b90c46bc95ab56b12d8c81da70288e4ff398b3ff5be76016faefca19e50abb7a33b4a720c7124fa8d11ad79","ssdeep":"384:XSwoE+Stv+QguYnmQo+JO45urA6ISZKA4+Wbd0738j0fbjEwN5qFxocBPJTh8D6+:CnSt2EYmQo+Jd5uFIxA436T8IeFxoc/c","tlshash":"16a2e0031323453db8085d4a26e678fcd2963dcca1c8a1cdee6ad588715ee1e2b5c9d5","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-04-20T23:50:44.693616Z","times_seen":829,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/float_agency.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/float_agency.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 5165\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-142d\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe93d8d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 140, 8-bit/color RGBA, non-interlaced","md5":"2c279cb014269b6943c619c58aa84fbc","sha1":"29009117fa58ee125f0f5db98955f4a13d7812af","sha256":"a861b4a28f276c610ddf0ac12a9f83ce62ac74f8a5d8500158e8b67d6e923927","sha512":"dda70c6c523308f63daab5062047e9ad0f5cb3c4071e99ac8296ba264def412776223c90d1e2516b908985584ebe4b23de08ec4cb71ae6c58e7bdea267b89d02","ssdeep":"96:tZbtt4FF7e9Cxyw8f3lFAPsXtJu497Vj7sF6GPCq0yDS/SDGnBN3fqmoAv+5:the7o1FzdJu49hgwq0AkSl","tlshash":"c6b18ee2a0795dfa2433e2d0518c2b98300bf25fc20b637cfa9d4663117e35a82119e4","first_seen":"2025-11-09T23:11:08.857971Z","last_seen":"2026-06-21T05:12:09.655051Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/common/main_loading.svg","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/common/main_loading.svg HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:35 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 921816\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42f23-dc6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcddad6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4784ec426884d625664ad4f58b1332a9","sha1":"b24d0e46b2915d1d660d9d5b0ba2556568d4d1c8","sha256":"9dca954966bc9746adc4bbe14f34ce6ae8db87440ce1ef5452aa6dafb34e3841","sha512":"9a431de352171c7db3c5c5d25598ec6b0c3b633ac9e9e892ec18be952d5bf21f5d316d91d69f08363b609a672e59eb8132a1f6d777dfd8e2d10311a3baf3411c","ssdeep":"","tlshash":"ee7172ed20fd9469e8038339936d31d1647a70dba258cd6cb4ee0515df2670b2bc72a8","first_seen":"2023-08-26T14:30:54Z","last_seen":"2026-08-07T21:57:50.4204Z","times_seen":1110,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-bd91ad18.766b9945.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-bd91ad18.766b9945.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1014297\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-73da\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbddfe7b569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29658,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29592), with no line terminators","md5":"f2b986df55aa67ff693d32a52f8c069f","sha1":"7c810b428db3fee618d878e4b318a91659471388","sha256":"249edf06f4e915809f0d2364d323d934b57f54c03da8a0877ebcf72277da617e","sha512":"c4d36f83ef40f4964f1d2421e840039c2235750b683cb58af27756cf0b4bde95859bd805639b04710f6212bbad18b3f5dabcae564b55111960e3d983672df3f2","ssdeep":"384:nxm6x4cHJiJ0YCDUHPynczrnnOsTZaH98a5H5JSgTXmRnFK563tnz1IY52c+Cc:xm6evy+0H5JSgTI3tnz1UCc","tlshash":"ead2d853c2176ac268fa2c057057b740f9accec482ad884b8b4345e312d7963e5b5fbe","first_seen":"2025-10-15T08:36:50.914022Z","last_seen":"2025-11-26T12:39:16.186531Z","times_seen":103,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img11.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img11.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2724\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-aa4\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62ba1569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 72, 8-bit/color RGBA, non-interlaced","md5":"0591f4923cd40e728aaf4f9e1f64e02d","sha1":"f1a4d74041d1ef194ff5075010bc5d0411223d76","sha256":"34b321e09261f7fe2e237d05e2bd0d716802feb9b8748ce25afc424d35bc6ab2","sha512":"4d23862d7f3312b891dab957b3b8c3a026020e70c896de8baf1ec4f5740da140d6d6841add24ecf13b5c3f80eb7f67b7d64a912de1f696dd417f58e061ecd1a8","ssdeep":"","tlshash":"c4515e41d77a8afb0d0db375cb7b265283e02eb6e7695c54f707c4c0d5243684192ab5","first_seen":"2024-08-19T15:01:00.960965Z","last_seen":"2026-06-21T05:12:09.790265Z","times_seen":6,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-7addf818.a0f5332c.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-7addf818.a0f5332c.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 518514\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0d-10b\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6cbfa569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"214177e7e95134191166392f61160e91","sha1":"ace52d4de1305fddaca3d9556869fcaf446bc404","sha256":"b3a87493dcb8aa055beb8a17745dcf29e869ec25f02dc87526eebc5973e9419b","sha512":"ae30efac61a5bd0eb73b6f4f6ca5e4ec90d1229c9fed4363c597912c7a11fb8535c1127b56ce84366846ef971d71d8a50bb82d4f41c2f33039896b2f8a53620f","ssdeep":"","tlshash":"bed02e05b9824e2cb1d7a6ff2ee1e0f5801ae8e680959ecfbb09f720624e0c400135d9","first_seen":"2024-06-10T08:09:51Z","last_seen":"2026-08-07T21:57:50.510567Z","times_seen":1159,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-765a6c3b.f1f858d1.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-765a6c3b.f1f858d1.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 633889\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0d-5d\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6dc07569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"795f20c6d4fed64ae4c943067ff9f1ab","sha1":"db3d09154c8ae009c610eaa54822633e1a696ca9","sha256":"300091c9b3cc79b1b00571afdcc296284e3a091a70319f25eec435454b475f6a","sha512":"2716533c615e4fdca82c4b90ca39fe8bb260d1aa9d4b1422d70b5957c55d30a6f0e1fcefa48b2dad209894602f018c495dbbcd73debbb9c57dc353ce50b48b73","ssdeep":"","tlshash":"14b00200915e58db9c43bd0e3864255415155047cf7a14166738d3245766745f55658d","first_seen":"2024-06-10T08:09:51Z","last_seen":"2026-08-07T00:49:02.54193Z","times_seen":713,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_container_top03.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_container_top03.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 9045\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-2355\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d10569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 295 x 180, 8-bit/color RGBA, non-interlaced","md5":"89c28b3fac57835da7e5cc761591297c","sha1":"0b6a404f7c6c3995004c0294b2cb6a1553447fab","sha256":"e900b893f2999c91adcc0aa95f731efafbc6d1e87d2f3848b793420217bf9ec4","sha512":"88027fc052ab82213c8d8bf0850b3878f9912b56f691a4ba0f34a7c8b901700364e24ecd520016387c24394f36f4a60f25697e03b1a1312d34e6acb39fc702cb","ssdeep":"192:wduAoeaNNGy7VGxGMAwsx22Q6vdJ9LoikgV5HW74BFQtTh9iWqYGZVwgBi5+:wduAoVN3VGxhka+9pHW74BFsNF46nU","tlshash":"e412af8ff02c4086a519861dda7c7e3bc03203279839af47e82d57d614a7888d96ef70","first_seen":"2025-11-09T23:11:08.86514Z","last_seen":"2026-06-21T05:12:09.595191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.agilenavi.com/api/fetch_time","fqdn":"analytics.agilenavi.com","domain":"agilenavi.com","tld":"com"},"ip":{"addr":"54.178.240.30","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:34.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agilenavi.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:C7:A3:FF:03:D2:4E:85:F5:7D:C3:89:6D:5F:F0:BF:34:8D:83:00","sha256":"D9:80:B9:31:B7:37:96:C8:F0:C0:E4:7B:2F:5F:4A:41:80:85:A0:51:29:ED:63:16:8B:E2:3D:BE:2E:36:4A:96"}}},"request":{"raw":"POST /api/fetch_time HTTP/1.1\r\nHost: analytics.agilenavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 778\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 09 Nov 2025 23:10:34 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/index.a644e26c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/index.a644e26c.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:51 GMT\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1014302\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\netag: W/\"69018bd3-848f\"\r\ncontent-encoding: gzip\r\nset-cookie: _cfuvid=XFVnBJHXtld988Rnivcs8IS5rYeAcyTzzL6eoJ0qAaY-1762729827.1931174-1.0.1.1-zIK1yOohJH_DT3Cl4jyHJ_u976.bNtjhOeXKcDXU4Mg; HttpOnly; SameSite=None; Secure; Path=/; Domain=g4.cldfvn.com\r\ncf-ray: 99c0fbcbfd423181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33935,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33935), with no line terminators","md5":"096dc2ba7837cc96cb1529a6a5359191","sha1":"8938153eab9ee6bdfd44521f3b2872ac06df653b","sha256":"d52279e8ed5ab66f12ae8dde547ed95f609c1f081f8fe4085a975e7e71f52af1","sha512":"eaeb5432c2ed3033254a88398b800a285262d7172f884552474f28b19e0572edd0bb90398c2648b90686988101b262d76c28e9b011e8fcdad7091a8265395f91","ssdeep":"768:E2+7PxeXVXY4fQn023zYpgw4FKCo9v76wR6UK0Wb/Bd/bd84on:E2uxQE0AYp5Z76X7BhKFn","tlshash":"27e293b6e384f9394b916c571526ff63509f2a732d30b7b2536c92b053a08f90387c5a","first_seen":"2025-10-29T05:48:39.593299Z","last_seen":"2025-11-12T23:56:07.388677Z","times_seen":36,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":33,"dns":7,"connect":4,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-e79c82a6.31ec71c0.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-e79c82a6.31ec71c0.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 03:02:30 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 82004\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"68b7afc6-399\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2e983569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (921), with no line terminators","md5":"193481f134eb29968484db1a03945efb","sha1":"29e6cf4d5dc8e1ee0f554ebf9a7c78a4a8e2e9b2","sha256":"cae618b6d743e0c1200fb232279307c35d258802cf633731fc43e7f5396cb0b7","sha512":"982fdfef8988c152537bfe1e4eadba56d116c9444bdb7fac313c8167a4f85742e9bf1b5b1ae4c69be8de41de7851d8c54e945c19cbd5b15b7fbf085bafaf3922","ssdeep":"","tlshash":"4311904e5aa8618dc2d20503ccc81e788978d99af1378ccfb3a7544b275528976fdab2","first_seen":"2025-06-04T12:36:34.241763Z","last_seen":"2026-08-07T21:57:50.421155Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/api.php","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /web/api.php HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 156\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (2620), with no line terminators","md5":"a8b04922984699073f937f865df91e8d","sha1":"f0435ffd97084fd96bb4fcf667fe689ea6ff5dbe","sha256":"e95049862675c6fc1fe558fae5765bb3f9167e0b405ae7a6447e1a261929707e","sha512":"f19235e346540483ec338eeb644bf38aa5b8c98fafb6221449c33f420fdd4b0776ed528ddc7dbfe14b90f38d2a20e69eec468e9293029872ef3728e871d0adac","ssdeep":"","tlshash":"8a514c5141090dfc9e0a1e3892ee27de9101f02c15f8f4e4627c2a4f867a835a0bb29e","first_seen":"2025-11-09T23:11:08.867582Z","last_seen":"2025-11-26T04:35:53.972624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img15.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img15.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 9910\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-26b6\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe63bb2569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 86, 8-bit/color RGBA, non-interlaced","md5":"125b04ea0936c041b3ccdf77b6a5b959","sha1":"aaea7b71dd11373a249dfced2a36810ef97ccb0f","sha256":"cef2064a82cfd1276d25eb534150ca1c846bd15d9132cd741594de2fad5f1b21","sha512":"b1524e621936d135410ceebfdf48628e62ec6e1a0a24c665f9eb00cf2ea022619cc3ba60ccb3b68301022793f6c9558f6b8e28a0aeb7106f1ff0bc02fcb81266","ssdeep":"192:9zgiYCfx9xiE2dk3DabV3fEKtZZPCUZW2gA6AQO9XR/AqmsNrabWK4m9sLMbK79:9zJYC59YNKubJfDnxZWQQO9hnmyrQ34l","tlshash":"44129e2a12ad4d20267395cd37f90d3618a999efc8e2841a30d10ced68d4f675fa5f7c","first_seen":"2024-08-19T15:01:00.963683Z","last_seen":"2026-06-21T05:12:09.777243Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/slider_ctrl.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/slider_ctrl.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 205\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-cd\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbeb0e99569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 6, 8-bit/color RGBA, non-interlaced","md5":"9ee9e9275e43da8a1f5d2d8fc85ef661","sha1":"17baa5c92965b101c5cc135e34bb86cd081f7fdb","sha256":"6ae2d780e051b8c74bdb8eef3590ee300fbaa4277f34f6e0baa9b72d7deaa004","sha512":"c8c67bb316d2941771912d12f400c1b1c41be33a9330466d7349d0a3353d0a202d2cd7c6180c80b1823e66166609a6cfd271a06742dd9f30564b0904c30eacb1","ssdeep":"","tlshash":"5dd022cab3886ca8ceaac83381220000a02a469b80020a1c8d08d02639888fc4068f69","first_seen":"2025-11-09T23:11:08.869035Z","last_seen":"2026-06-21T05:12:09.763189Z","times_seen":3,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176111713358.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176111713358.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 129275\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 22 Oct 2025 07:12:13 GMT\r\netag: \"68f883cd-1f8fb\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 142442\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=NFWudChhjOIMLVTMS9DMefl0UB8yKOjaMSLf.kLSV2w-1762729832.1923738-1.0.1.1-_ATZpY8gjhonwsgntJnkDpgMPc1ESNDxgnMCNiP1510; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3eb9569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":129275,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"506169deec55b86eb97f6b361e50a5d4","sha1":"0c77d07e4964c0d91057e5b7bf28ef66e606253c","sha256":"11b987b0de4686de585c55a57b9316f0a12bc821824c86ee20536d5db0506b41","sha512":"b3446780129851b73b33dd4c19fe1b2b755a1eda76be7190b125f8166551e40f6d101eae81f8415fc41b8e56c4f2ef4437aa1cc025450065146abc92c8b1418d","ssdeep":"3072:SnP2ytrfhnqqfRSnQSCu9KuvS2TbkJ10wVU/mXR:eqeoBXUJFmmh","tlshash":"9bc312c4e7d372fca8aa441be4ec6847196839153e7a950ab17f83733e9e1e305216d3","first_seen":"2025-11-03T05:20:14.327329Z","last_seen":"2025-11-09T23:11:08.869747Z","times_seen":15,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-3d163519.f003425b.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-3d163519.f003425b.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Jul 2025 02:27:23 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 1906301\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"6875bc8b-1990\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2b968569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6544), with no line terminators","md5":"8be0dcddf03b6511b9bc81ac9f04a6d2","sha1":"575cf06921fe1d2e977d44730bfd85b72d9e07b6","sha256":"44d2f2ac013bb6cf8b120a3c2617b7c280b5484a465c8a5132af45964b209215","sha512":"ec9f340b803a0efe8bfdcec3d68b0bea5babe6178b2880960383b7f07693a31270e7117dffc56470ebc004d3769fbd154d69dabafc3b9f5face7b754a037b3c2","ssdeep":"192:VHPRLPeeLnIEnT8MoIcu/teEWpDm0zNaKMQKW2UKvKfKRKgzSysGrLhdFNN/BYzF:VcN","tlshash":"fcd1f285244f4c56e06fd67b24d63278081ca6fd5426cf3cea331a90fddb35a22725b6","first_seen":"2025-07-17T06:24:49.552014Z","last_seen":"2026-08-07T21:57:50.435981Z","times_seen":964,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/api.php","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /web/api.php HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 156\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (14200), with no line terminators","md5":"66295517c7a33a728f64dab2329121f6","sha1":"2c44eaaddb20779670c3b4abd23cc8afa3c51def","sha256":"7e7aa00f6f074f43a17742d9b9f3e4e6ead04d19170ceb3ae8a1b1c3f9319ed5","sha512":"053ff6636bf8f3a16bd980885a155815f5c5e5da65601cc5b41b4c8d00893cfcfa01dc1d52becaa525d34e981aef13aad4d16573c3eb88b192613514d7800d7b","ssdeep":"192:K40YEIakjMkHwTdhyfoodHrdNROxgRK5fB/ttXz/h:905kAk4p8rkIK55F15","tlshash":"ef526e91243a17541c6822703dbf62188f90bb6e7d5e18c3de7a7a193ecfe463727621","first_seen":"2025-11-09T23:11:08.871234Z","last_seen":"2026-06-21T05:12:09.611424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 216\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137504,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"605575e623c55a4ef9addeadb0ff43e1","sha1":"6a1a5ec10eb74681f614a87163654b877dc95aaa","sha256":"8e41137d6954189f6e8320aaab19649558aafc771b7fa910af7155cf6794a661","sha512":"3408eecd1459b0f3c4ed26e234df1ef02ececc483c2e9fbc121a4e1dc836e607f36bd82c7f8668d42b4b213f71e4140a0ba1cfc6150f7446c7a8c1688be95a9e","ssdeep":"3072:RzZaf4EKO3JyX8bFb7i6vdFc/L9Kwn0D4WAGtxb2dKK:3af4ewrkCDOH20K","tlshash":"b8d3f125ded83f58cbe84228e1fe122e93e05db7271f61c95b13bc4a9f97284a01b195","first_seen":"2025-11-09T23:11:08.872136Z","last_seen":"2025-11-26T04:35:53.980424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-6a873ac2.1f77b2cb.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-6a873ac2.1f77b2cb.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 03 Sep 2025 03:02:29 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 483517\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"68b7afc5-1e6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe56afd569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (486), with no line terminators","md5":"4f0dfbab72683dd960c00f5a3a992d54","sha1":"097b0cf6db92c5ded6dc1517ce901d37ca07343c","sha256":"38d7d2eb0c3da17f2539a9a5060b2ea41b7beb174afb137d4ace4efd0f2a2dba","sha512":"4606ec28c180e0735a65c338f86828d41e44920ee5d132fbb17dcfa311a30a48b73c3f8e01a42dfc824fe446876fba72ad595cf6bfd176b23c1939c103a2a836","ssdeep":"","tlshash":"03f0e20e8b9ba62104c6a61f38dbb5a80738514cff7200fef9d00061c7da1115a8302e","first_seen":"2024-06-10T08:09:50Z","last_seen":"2026-08-07T21:57:50.495768Z","times_seen":1159,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012581542.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012581542.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 444276\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:16:55 GMT\r\netag: \"625aebf7-6c774\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=iaDjVSSgDL32zQ2btvuLCzYpGg7DWMmNJWNWg9ZmPtQ-1762729831.6919737-1.0.1.1-p2t0RChh7fszBFQRZ7Q148_L5FoACfBa0806DFXhOpA; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe81cc6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":444276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"076a667660530d0c0df84b0e013b3f49","sha1":"da061b9a01cfdbbbd3a05940a50e99d50b51d496","sha256":"bdb5ed53b0ed9b6fef8b3a89c36424d7c341a52fee2a3462fd3e34af5707c375","sha512":"eced88e102369c08c7c1bdc44deff46e404c203f33c493bbbe29d581c0c2d0ad6306499e4c66979f45825c744293b5eec4bf685ae5c9ae02c63d6257b24d5c01","ssdeep":"12288:WhJ4BKrKPpLWa+fdWP0gCIxygVojaxewuYdsOKTm:WhOKOpLWa+A1BYIWaxewuYdsm","tlshash":"14942382435cccb8df7fe521ded8a554bb87a97a5039baf0f959ed00b50618f20184af","first_seen":"2025-11-09T23:11:08.873536Z","last_seen":"2026-06-21T05:12:09.667192Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d23773e.6e2c8d6c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d23773e.6e2c8d6c.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:48:04 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e14-2f4\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe83ce8569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (756), with no line terminators","md5":"eb735e11cc52b689b419dd46f6eebb40","sha1":"93f386f3c4a03d2c90c1de4c9f9d7be82657203b","sha256":"ff3cbbb429681da2510e9c07b170baf2aadb4b9b8a50ca32c15f43262ea47da1","sha512":"ce4507d3a66e85f95c442124986bfca653ab3e97a0ba0f44d986ac43387a19cebd23a27b8f41cdd90f053d6aa4fbe52b6856c78d41008a95b28e8a06b6b33b19","ssdeep":"","tlshash":"a90149ae4530b9be84ff2288622a968907d315a63931d4b064b14c30cafd7c80693b8c","first_seen":"2024-08-19T12:58:59.20643Z","last_seen":"2026-08-07T21:57:50.496368Z","times_seen":46,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-e79c82a6.4ca3214a.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-e79c82a6.4ca3214a.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-b4a\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2e984569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2890,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2890), with no line terminators","md5":"c5a6e17d05febbedc9726069a8a1e9e6","sha1":"8fdd11d8952a0784302f6db992ededceaced9f78","sha256":"afa4dc9987d2baaee86aa07fdaf2b23847cdd5bd1713a9795f384f502091cb5f","sha512":"181056b580d90aceb7a97c4afa584d3049bd2607cb98b2415bf7c50951e8927f889f672abff7c0ba99ab43bbc652c57833d078255591907a8c45462fa5261ad8","ssdeep":"","tlshash":"6251b78cb1d9fab800e54042843f7306f2662804647be152a7b4d7d9da7459fa177b2f","first_seen":"2025-09-07T10:11:57.841981Z","last_seen":"2026-08-07T21:57:50.524399Z","times_seen":953,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/cl/js/ubauthsdk.min.js","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /cl/js/ubauthsdk.min.js HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\netag: \"690bf811-9f5f\"\r\nlast-modified: Thu, 06 Nov 2025 01:21:21 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncontent-length: 16901\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40799,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40799), with no line terminators","md5":"ae5a316923f0ee6e245bc6cd49bc591b","sha1":"e25669654f5a67b4bbe44b56d8f0f67d83f63633","sha256":"05205b9edf6f283d2b8f710a15494a99334e46ac317f58e72aadd4b8df2ceead","sha512":"9d9e479f23dfb26c84648675a478ad69d9c70e03d48021402c1510f9a90bb609724958259167ed5a059befca7bb623e389f5861f424c214ce58b51b9b0770c2e","ssdeep":"384:FfXT+TGVREJrTl5tzDdh9kl4CxiRHq1sHBThXxVWk6ZTXbr3fr0iensSuDXq3lPf:hSThqbxiRfTxsVSUkLhPa1iD01+","tlshash":"9503d7c436d6b16a43eb76a0941f300af238fd70590ce454f611f8a578b8de9c66bf68","first_seen":"2023-03-13T09:31:10Z","last_seen":"2026-08-07T21:57:50.482431Z","times_seen":1220,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_casino_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_casino_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1912\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-778\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d27569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 57, 8-bit/color RGBA, non-interlaced","md5":"6b91a035a9c859d0fe553e5afa519e1e","sha1":"17271950fa31ceabc105157081cf188a3cc62ae6","sha256":"d870430cbf1442c62cd3e7d047d39182d745f83aca3af774df88880357bce909","sha512":"5dff4c17b11c3aca9abb16538dee365138c48c8df4557084e9a1559e112cc11cd58d3af21a4e881b94512cc77191d611c20447a47ac67a7c9eefcda971471799","ssdeep":"","tlshash":"8f41f9eb84055f4a465eabeab6111cd9ff5a00cbce063a4b4cc6d0b1aa3ea1915d1a80","first_seen":"2025-11-09T23:11:08.877298Z","last_seen":"2026-06-21T05:12:09.67214Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_175393392741.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_175393392741.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 29953\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 31 Jul 2025 03:52:07 GMT\r\netag: \"688ae867-7501\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 633889\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=DiSrrI6LrNowikq6aKjlz0LM64yl40BwqrB8XsCrB64-1762729832.2136304-1.0.1.1-.zTvoIWnDUW._XlMHfmTqK3aPlcYuIhBNdMj36StjFA; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb5ee3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"bb4fcaff68877496f801ddc692361d01","sha1":"e2591e385154f2afa287415ad06afbe8e3a2b917","sha256":"f778c044bdbe58ff1c60d12946c102888859f45dcc36cd22eaddbd6308737a3e","sha512":"c7300fd7cda02ebe2488e8dc52865eb7eeca1cfd528fe49efd6e2da0e25afb6b490bf347684a5d5e83be6a1ef4d683f54c71ca8333aa64b5d5d8aec3f2c8997d","ssdeep":"384:pVbTxYS/wJoKsjjZMkxF0QQ7t+lp7FeHyeRj921wk63EbdnsLubi+XjV6lSvHkky:3bTWPJoPjZjc6hkSGQ/dn7bXoGdlKU9W","tlshash":"b7d2f1f58767a371332f9e75938e8830803782061275cd6bcb71e916a081af1d1d1f7a","first_seen":"2025-08-21T14:51:48.283959Z","last_seen":"2025-11-24T01:36:20.093852Z","times_seen":157,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-99d68ba4.7df19506.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-99d68ba4.7df19506.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 18 Nov 2024 03:14:55 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 1667485\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"673ab12f-f10\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe59b1b569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3856), with no line terminators","md5":"b6849d6dabb4aa874a0a8afec074fb3d","sha1":"6c71bbcb63d54eee2c23e828ef88eb235675892e","sha256":"02f8798dac0302beeb46ec92186a2b67c686bb49ee801385df5c550c62f12c22","sha512":"9d55956d1eddd7b2e3ff8b2e8442a0c2f06dc1c96ee9af26bc95cfa8567ffbca8b2d94f4be1335b351aa3aec6587f515e65367afb7b590de8bd8a25a7abb5e13","ssdeep":"","tlshash":"ae81125c3515572ae01b93732bec769dc33bf819fe23a22cf36ba96b5c950484831761","first_seen":"2025-04-08T00:50:44.57292Z","last_seen":"2026-08-07T21:57:50.539534Z","times_seen":1075,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-8761cd82.1bee5bb8.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-8761cd82.1bee5bb8.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-135d\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5cb5a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4957), with no line terminators","md5":"b1e3dc5aba0c5026a516de7f55e35148","sha1":"ad7e8b54df7f2695377787fe9d14afb4ac419312","sha256":"fd9ccf2940d3baa1d18f39704453ab5bbec507df6a822c0c0fb940e8c8045f3c","sha512":"3b1d1cadf3e4d137c620fdc12942d9e598c90b85dda6d0feaa7c85ec72d4a152198e61a03c1708183100edc9bfe72ed301e14acdb83ff42c922ded2647671e78","ssdeep":"96:jX2rVBIQmODR+/E+SpPSYKOKPsjNxZqZu:rg/c+groPSHOb3Zn","tlshash":"b4a195bd7796743b00a7820ab15b6f02763b25096492b446f37ccdf46d205477066bfe","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.547521Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img19.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img19.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 7464\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-1d28\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe65bc3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 86, 8-bit/color RGBA, non-interlaced","md5":"fa206bec9939031bad91faf56a90a20a","sha1":"b7867fb0fdb4e9c9423761bc36cc5902e0e31fc2","sha256":"856e330ac796d77ca76a11acf0527247a6b05716624c87911a1de96a62bef15a","sha512":"1fa5cf7f3e2c8e525c30951bd23f7ea65ae7d5f8c146a0b0ebedbb5fbf223fabd86dd8e0fca957f407394c3ea3d225a44db0a1086f87311735cd6d607997f978","ssdeep":"192:8lRUqsMJO/S1xYRW106YQccmhSehMqpZzg/valtswmPV0k/CG:8lRzUS10N6YQcfh1hp3EXalxmP+k/CG","tlshash":"c0f1afe0c551af95770c9bae9df81102b1bfa2a6b02353f11cb9d9e0b03078db544ad4","first_seen":"2024-08-19T15:01:00.965557Z","last_seen":"2026-06-21T05:12:09.690075Z","times_seen":6,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_container_top02.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_container_top02.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 15052\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-3acc\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d0e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 295 x 180, 8-bit/color RGBA, non-interlaced","md5":"444075524031134c1b5589a63e7bc903","sha1":"d9971a6bda0e4e42b6419c33e2074b2e0a824724","sha256":"861f7037954f6529dc59b4ca059ddd9a5eb07e7d266f206b58d0ab4df0301765","sha512":"7f5a60b94bc9998dc37103ff8e17598087f1e29f9636f8e5732f37d2951bcad682f716db6e72ee23b3366e899bf7c609b2d47ffefd9b46d325b7b73301abc090","ssdeep":"384:wi+Lss1NV45ZXt+7dWwKBF2NSL5+n9iDXENxls5gm:qLTwN47wwKv2NIEcb","tlshash":"6d62d1ded0612824406b7cbccbb3d0a7724898f66e4114e07d658e4e31da76d482def0","first_seen":"2025-11-09T23:11:08.891892Z","last_seen":"2026-06-21T05:12:09.815384Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.agilenavi.com/api/nav_time","fqdn":"analytics.agilenavi.com","domain":"agilenavi.com","tld":"com"},"ip":{"addr":"54.178.240.30","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agilenavi.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:C7:A3:FF:03:D2:4E:85:F5:7D:C3:89:6D:5F:F0:BF:34:8D:83:00","sha256":"D9:80:B9:31:B7:37:96:C8:F0:C0:E4:7B:2F:5F:4A:41:80:85:A0:51:29:ED:63:16:8B:E2:3D:BE:2E:36:4A:96"}}},"request":{"raw":"POST /api/nav_time HTTP/1.1\r\nHost: analytics.agilenavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1046\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":2407,"timings":{"blocked":1067,"dns":47,"connect":269,"send":0,"wait":273,"receive":0,"ssl":747},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-12091afc.4b614e5d.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-12091afc.4b614e5d.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-12f6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe87d0c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4854), with no line terminators","md5":"604957fa0388a0213ea9ab858df982e8","sha1":"1c1d1c3cd1a2c477372943d6e92a026196220f89","sha256":"681889a633ecf26cf745141bd4d49a062129f8d4b05535418412bfeb3919c3b9","sha512":"0b9e8994e17a0f14c45a352c26cbe3c0d08094ee9d119fb88285557e95110269601199a15d6193b30a69830c7d582c824aa7b90f1332cbc804bd052ec4f6e45e","ssdeep":"96:juCa4aOOl5h7QznzebLb6aNaubEc7aSzHaNaBbEc7aSz21BcP3bqKPhCYb/q8M2X:juCBjOl5h72zebLb6gFbEcrHgMbEcr20","tlshash":"20a102a87095b738886080127a3b76c5b3e97b1ca72fd143f6fee7a44790a441d2172f","first_seen":"2025-04-10T03:02:11.040645Z","last_seen":"2026-08-07T21:57:50.504404Z","times_seen":982,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:28.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 156\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:28 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114520,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f5880a7ff56373eb641d346db945cfe4","sha1":"823f05527482494c1c4f2dae12fb40d40ca91ae7","sha256":"4e799b577f5574ba94600b9b78517aab3dc8545ef08a0c724575ebf54642174c","sha512":"28d7b1fb419a76463ec17b58924dd0a26555df32afe66c1eedafcc3262bf9e2956027a965e2922f4736cd85e4675ff2d41158deb3027628c88316fa199529a8a","ssdeep":"3072:+bb6AnLXgrfB6CnBpVOOeu09l3oAy/PpGZr:Ozbsp6CnBpVO99lyha","tlshash":"99b3e1918dc42f75eeecde1c50fa2a1ea2e14a5c51967189ef33bd027fe7448520b1c9","first_seen":"2025-11-09T23:11:08.895645Z","last_seen":"2025-11-09T23:11:08.895645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-90f8b594.3ad23e5e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-90f8b594.3ad23e5e.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 168929\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-2a0c\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2c977569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10764,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10584), with no line terminators","md5":"f40d4cafa61e5d577f4d427834eef69b","sha1":"b6c1508c7c3f153ad569eaf095af4b5df2e6f656","sha256":"508d1a1b86936a0e6828eb2c8089d88a548502f0f214f337b0801add466158ac","sha512":"ca2d5703b3073c2cbbb19eb8b9f95a3effae50633b89332074bd95fc56fc4eaac888d20d8fdf8eb826255c984e74ce2998de103922d7d0aaef4e10744527adb9","ssdeep":"192:eRbaq0HJSIhRYmEJc8NO3soFnNTlSTqKnOCFqdZ7Cr7KwXT5q0rcmr7mg9Bo:e5uJtlnNxIF07x0rRriMi","tlshash":"9e22b78df2dbf8954766a665107f320ff22a19a578588806f236c8c43e6044e6277f3e","first_seen":"2025-09-17T18:13:55.341972Z","last_seen":"2025-11-12T23:56:07.468165Z","times_seen":144,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-5bc6f1fc.c008785d.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-5bc6f1fc.c008785d.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 03 Sep 2025 03:02:29 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"68b7afc5-56b\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5ab46569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1387), with no line terminators","md5":"4b60dcb8beac9b153168c1e89e9c49e4","sha1":"8dbe0a542ac58282d27417e334ec2a70edbfc0e7","sha256":"b28f3243f12a86f07217b24d8e73a461a36732eac4bec9e291eef8ba7224fa62","sha512":"5dffb65910f232dd5894f19cae77276acb8b1850450ac558f2cbbc2aa9bc416001043804d8a907c3e098d6c902bda330e4947770a28927586ca2c61f3671bb18","ssdeep":"","tlshash":"662108162e2f7821d123c95e58d473988c2ca1c6adbf008baa6723e30d53767233bd46","first_seen":"2025-09-07T10:11:57.839837Z","last_seen":"2026-02-02T01:17:12.713682Z","times_seen":385,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-4a97e788.9f237e2e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-4a97e788.9f237e2e.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-1b196\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5db67569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110998,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50590)","md5":"04de38d21558f99d92ce278c245d7d8e","sha1":"13554cce1673501ea6e2f7965de9e9cf1d9447cf","sha256":"7bd3193421a4cee6d14490e3b4f0ad901f8bb6c572003c7a674623b1d06cdb65","sha512":"27bc3c8ec80e770fc054ef23598dcfe61c62afcdd74769353617951502bb82997a441be6f961f2729cf0e0dd6f290685faa4bddd5fd7dd964ef4ae4a0f271be2","ssdeep":"1536:Lqf+W8PQn5BKZEVIjVjesioG2D/qLQe5KpOvPAWCP9RoLDf:Of+A5YZEUxa2D/q/ZmRcf","tlshash":"b9b32bca7211605105d720ea547f0a43733799b9b40a8a1cf299c5de3d2dece22bbf76","first_seen":"2025-09-07T13:01:15.189434Z","last_seen":"2025-11-24T13:01:19.744769Z","times_seen":159,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-765a6c3b.e6e0dc63.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-765a6c3b.e6e0dc63.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 368336\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-67a\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6dc0c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1658), with no line terminators","md5":"655ec09258d8943aa140b70db32e8f9b","sha1":"c55bd0d461c23ded78d865f1a0b3938c876c4b4f","sha256":"82b0604c639ad4566ee159cfebef0a257fa533230428d77122f853c10fbd24fd","sha512":"68a0c5921e523780877b019496ebe6235c98bd49ca9ef0126cdfdcc73fafb10c4310fd084784187bd731e615dcb734546c956424efa20a4b0eb8358ae70e1b3e","ssdeep":"","tlshash":"b231464470adfddb04e5a392183f9347f15924096c36f5829bb0eac0981494f6572b1e","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.376034Z","times_seen":721,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_live_img.jpg","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_live_img.jpg HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69373\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-10efd\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d2d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69373,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 576x616, components 3","md5":"450b315fe0a685f6b292aa117f9f0aff","sha1":"fcbf45147cc80be18dde6a8f346f41344f2e2361","sha256":"7b704242ad25be9fca54feaf55c5fbf46f8e88ac282b053eb3afd9a9942e4eaa","sha512":"2fa57e4c6e3a126c55b1baa1c88303a0f7638d0cc72193c513bd5e374c57afed4f64d0358d351965da2fbe5ff97bc0a31a69a6c0b0320c8bbebc4476a7acc69e","ssdeep":"1536:vx/wIMq/1+kS+NaKOvmQL1Qsr9XUaf5rlEX+ciOyt8OwiT:vNwIMGl5+DQE9Eaf5rS+2ytNT","tlshash":"ed63f18a2446dfd561dc87a841d70f6bb227e0b16897ca02e6df158693cf83e45c387e","first_seen":"2024-08-19T15:01:00.941519Z","last_seen":"2026-06-21T05:12:09.698299Z","times_seen":6,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/cooperation_game_family.gif","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/cooperation_game_family.gif HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 13101\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-332d\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe8ad3e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13101,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 140 x 140","md5":"2d523d4748da722d22820fdd0efaab8e","sha1":"decb673bda236f74aeba119ac35b32de0d66be52","sha256":"88a062df25a8ac4eb5abbe16020ebcbab60b89391a5311473c001b927c78073b","sha512":"3f1e5428906a33d78c1149a54c81a46ba763e557d07b95e4e4ae93475d5fd92a06bea7d6f44f671f1da4b2898df7cbb2be9b58f3eee283ddb77e7d946ce8b4e4","ssdeep":"192:R+qbjYrsgKJM6mLvOvZg/cVT6YessPENOnyDONHDrTmf4tkJbiM9IfwI:R+2jsR6mLGR4cRlfWZDnmAtQGMWfwI","tlshash":"9e42a00cde530d8831c9e1c069143a611b74a4d1d6e4e8517aeead67bf5a07e874cfca","first_seen":"2024-08-19T15:01:00.953297Z","last_seen":"2026-06-21T05:12:09.699104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/float_service.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/float_service.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4388\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-1124\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe91d80569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 140, 8-bit/color RGBA, non-interlaced","md5":"a95d21e2bfa63a138149caee7165a17b","sha1":"61a82cc00108be7871a96bb054844c15d0feefa6","sha256":"62e4dedb24c86ae7fd70d928872df25e9fefc58aef58b9bdda852e6f4da376af","sha512":"4cae87a7c65afb0e329bd7fb2ed90fb4d0858732d8c064e501007b6e679f64c305e7e4faa68d84a399d2125426081547fb9372390f8f2944787c2b05cfa9232e","ssdeep":"96:tKjT2gRmPb7Yk8jHK0OvuIO3d324iGMwgExqI:tKj+Ak8jHKPO3d324iRE5","tlshash":"32918e075d0cc2f5574f4aa01dd389076ae903e4aa88d7942c07e1f984a99821f6f7b9","first_seen":"2025-11-09T23:11:08.916478Z","last_seen":"2026-06-21T05:12:09.603428Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-21aae442.cc09620e.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-21aae442.cc09620e.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Apr 2025 08:06:11 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 539216\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"67f62a73-646\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcdbac4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1606), with no line terminators","md5":"fde5091bb696a033dbea303fafd435f5","sha1":"21bba09e0644edaebd99d8881b53a31c3862da1c","sha256":"fd30062dc3390b3f24575543a322974c5aa9a327c8a24546dd27242a92629e54","sha512":"adfe1479b1ea8b040bb5650bf00b1eab6ba4f85c1d8861c3d36e083854f79e899c4329f84b1da38514ac7a2a390a4e14d55d1491d3db65d5db14b45040e3ba47","ssdeep":"","tlshash":"6631ad59374eb50fd8e3832bf6d0696d0638a289d21a033df7bb8d99594f0c25967882","first_seen":"2024-12-02T05:42:42.067276Z","last_seen":"2026-08-07T21:57:50.449494Z","times_seen":1123,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3bf8b542.7e15c366.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-3bf8b542.7e15c366.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 25 Sep 2025 08:43:12 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"68d500a0-11a94\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe29959569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":72340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36061)","md5":"7a9aada4286da680e7121a9383717bf6","sha1":"1af2483ea53a02ba7307c561b5fbb62694f9748b","sha256":"fa9e045384a40b104326f6f503cfafa052af43abc21e43858d2016046af81ca2","sha512":"dc7b590a167321dc750e5793d68a251d4436ff0a2bc0d6535ec0a2c425674a01d0b4509ac3018d3ee2b591e1d4e45554cb53a7e7f9989657bbe5f647b70de26a","ssdeep":"768:3xfhcA5wOTQpz3y6DUs5jN1N19AT7ayn4P/ZWiogycF7pifbzSmpS5kqR9RGBh:rcawT3y6wS3NTAT+f/ZLo0iDzSmpS5k/","tlshash":"d3634c4a206b2077cab215a4192fe8197625a94a271c4d4cf3afc8f068f4cdeb177f75","first_seen":"2025-09-07T10:11:57.818652Z","last_seen":"2025-11-24T13:01:19.813817Z","times_seen":175,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/common/ublogo/ublogo_a.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/common/ublogo/ublogo_a.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 10739\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:35 GMT\r\netag: \"66c42f23-29f3\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe60b90569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":10739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 46, 8-bit/color RGBA, non-interlaced","md5":"37185906c173f75beed7afca6cf25a6d","sha1":"78f15d9464568e30508086218dd29f3da7f559b0","sha256":"0332ea623517c4390dc33feda45c200f2b6552fcf21d8df6edb6aa824e6d71ed","sha512":"67579e5d66d266568925e3142d7f978b74f1d2724d330ed01bd3c413caa2b75002b4d7a25b8de7fa48f73c3c8a25578cc7393dfbb95b232856defd131b293d30","ssdeep":"192:CSrknnBIeXdZVcgL2mhdm1+QnT4mpixlYlCEGYQx0cRPBluqLD89KZo4Eb0w/Ko2:dAnnWe/KgSmhCmslCEzQ+AP+IDEKW4EI","tlshash":"f822a04f8b207c0149246d8cb1f195130b397bc9dcd5d997ec4388562931ae6b6fc2af","first_seen":"2023-07-08T18:14:45Z","last_seen":"2026-06-25T07:41:18.799582Z","times_seen":105,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img05.png?v=1","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img05.png?v=1 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 5092\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 19 May 2025 03:17:32 GMT\r\netag: \"682aa2cc-13e4\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe61b98569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":5092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 72, 8-bit/color RGBA, non-interlaced","md5":"a6a03cd6e2a165e40c71205424468d57","sha1":"c14f5299c4d678c1ff15228d29bb184822823c1e","sha256":"e5fc31814830fd90209ee0f5c4ff658a072005c5465fdd9b45b746098718710b","sha512":"9a26aed603cb656fa609239fe5e05142b4700bd50a6ad3c8c9d06056778bfe714d87412eca9eabc0924b6472a5827a6bd7d1c75cbdce6b1b2b31d625c90a5083","ssdeep":"96:qSGVwknmWpYmxhz9xjeHSyNGvUl2VUdA/6GusnlXQPYV9QLo4gp7qPG4o:qS/knzre/T2Wd9GjlXcYrVtxsho","tlshash":"5ab15c2df5843c87131ceb2139ca54a76e124d94c2c2ea91ecdc953b66a44fb8a5c2d3","first_seen":"2025-11-09T23:11:08.919946Z","last_seen":"2026-06-21T05:12:09.613213Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-c6aa0208.f2a073e6.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-c6aa0208.f2a073e6.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 421814\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-2184\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c82569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":8580,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8308), with no line terminators","md5":"fbf58f2261d5b17b82b036241883631f","sha1":"50b5097a9c864d600a791905c85ba619ffb490ab","sha256":"c24ff039ab1ab35d478cf74f327811164c9550ee80e86a1538b2f2b83964cf6b","sha512":"31b936a7a668dc47b4a798afd48a0135193f3cc70819c0e208d126b34227b68af0699eba024841d374b945f0cd25c6c249fd5f99df6d5b81d3923cea6de2c87b","ssdeep":"192:KOMPN5b6NBDtXE/h4Y5W2tdixu9EmMPpvPzSNQ9t+MROekMN9tiI9d:KPaNGh4YztdixunMxvLSNKROzMN9j","tlshash":"a802fad6349eada504d24913202e530132b82e3ddd6faa80bff0ebcd4e94d465516b2f","first_seen":"2024-06-10T08:09:46Z","last_seen":"2025-11-24T13:01:19.729375Z","times_seen":396,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012599416.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012599416.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289863\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"625aecaa-46c47\"\r\nlast-modified: Sat, 16 Apr 2022 16:19:54 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nset-cookie: _cfuvid=qng4OdyglbDyKro3wqRimCXCB7H4soMcI6_jm9lcVVU-1762729831.7214813-1.0.1.1-aCBzSF6dzolPYQwapyFzLbSFLddnf4txSnqlcddUQxo; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83ce6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":289863,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"6d5ed0be3ca79f43531b25a036a09fc1","sha1":"6fe336a2683318704f066d8b945af8c016717972","sha256":"afd117de37326011fcf76fff9715d461e0e87eeb48a1f08cf142ccf16c054271","sha512":"de1e23ec68ca24b5baaa08d85c3af68ed5686b0312daab212d9d45b61905b5c1ce93c4793e7d31cded6cafc7ddb30d975cd8f9e2c61bd0101e522a490a2c4abf","ssdeep":"6144:Kl3K/VlKGFZ632aU0nLmigFs+y4mrDattk8zztIhyJC09aLzonwMD9:K1K/VldZVaUe9gvmfLgIhGCPzRY","tlshash":"6154236cf3be4509e68eba331313d33126560e2a9c476a97f19b6558fb40490bf0a7dc","first_seen":"2025-11-09T23:11:08.921965Z","last_seen":"2026-06-21T05:12:09.799215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_sports_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_sports_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2262\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-8d6\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d29569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 57, 8-bit/color RGBA, non-interlaced","md5":"2600c485d009970b827119b3c016c58c","sha1":"46153fccb74569f250ac85de2fbf28651490b7be","sha256":"ea354ad2752a13c205f91fe50ea56fa713e72838be508e672034e3b24720cb65","sha512":"b929b5dc3ecc0504ac2e25815340a5f0e666cd6f0c8ee4dec6f75b8ccd0d1c648e0fef109976e66402f6b75786703228ad63999884bfe0dd5da856eb804186dd","ssdeep":"","tlshash":"f8414b42b7046268a3fca630cd3103c5570427fc8a7442b8d431d27d68d749ed5905f8","first_seen":"2025-11-09T23:11:08.923396Z","last_seen":"2026-06-21T05:12:09.681533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/float_appdowmload.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/float_appdowmload.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2872\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-b38\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe93d8c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 140, 8-bit/color RGBA, non-interlaced","md5":"6866c6351453e75c39ea36d49d2b40b6","sha1":"9fcc2ec213becad4434d45f6f3521f2543f7cf57","sha256":"1504643a5d9375326a5ff7e18d18155b9154b559911e31ff441b95bb672cff94","sha512":"e2437c47eb2a63673a7ed669883075ca497d6474c9cb83104667a22fefb5a98fc46071c581f9a0a5974de65c6f598a9c888ba92a85c7407db586d5c396e7cc87","ssdeep":"","tlshash":"01512a8497228b7d61a58855033d018c74c16696b92d6ec5d1c83e393a72616b9ffed0","first_seen":"2025-11-09T23:11:08.924775Z","last_seen":"2026-06-21T05:12:09.707087Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a8e5d5c627b4a2ae198bb3d3d70e517c","sha1":"0512ccd6844d36a6eab6a815c9ef09d9c0cce34f","sha256":"091c91b05e38b8605142af2293595be402346a01fb4ef2224d6285123037c827","sha512":"5f56cf0715b290306e1c420b5906cdb026294581d0fa06bebfb5d4ae887f580cd523b20e3bc3265002fbac94dec04eedd2ec50d77db7a538bf2d1bd30273decb","ssdeep":"","tlshash":"95b0121304c07453a0c72180277db2c535414ddd0109775045c00cd55682160b61c180","first_seen":"2025-11-09T23:11:08.926267Z","last_seen":"2026-06-21T05:12:09.684761Z","times_seen":3,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-6b87d5c9.96946d7c.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-6b87d5c9.96946d7c.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 678759\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0d-66\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c83569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"33d45b5c07d6ce9938e26737cb8776a1","sha1":"019ebcbdcdb2b766788093dcf8ff2d966349cb72","sha256":"1eacc5c54cfd2ca87728d986b8ddbbac46397453ebe7fcb793e20dcb74e85513","sha512":"3e2f18ce18ea8839e186c251cd979b2a8abbd65c3bc63e36f4df3784b965ca40693b1f3d2bdbb023305bb919be0afb10a180860acced98db9e0904514670df74","ssdeep":"","tlshash":"99b092092a940f014032ce4922aa1446340ab0738ee090052190881ce6c7bec48e4063","first_seen":"2024-06-10T08:09:51Z","last_seen":"2026-08-07T21:57:50.498503Z","times_seen":1119,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-5e3dc5ce.a312ef34.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-5e3dc5ce.a312ef34.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 254052\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0c-26\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe91d7d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"e89e9d61411d22ea0c9edf85cfb8f0a9","sha1":"74cb8dacbcd31e63accc8f9e12c1035e7dd4a039","sha256":"88effe4546db88916733f9cca1b015673882d77d287d0ebfd551f321b8b1d0b5","sha512":"469d05951e4d9eae90629afafa78577a7b108e677351377f56948c225ea5b92a74227d9216cfec05cf8f9c959579483a19f40e56e976f0f43807f41f0858e4c4","ssdeep":"","tlshash":"ab800471500415175047f5ccfc7005d500344143d533040d011c41d0434145345154c4","first_seen":"2024-06-10T08:09:50Z","last_seen":"2026-01-12T01:04:58.380058Z","times_seen":310,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-1e5e0394.873befa7.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-1e5e0394.873befa7.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-5709\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2a965569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":22281,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21681), with no line terminators","md5":"f5779f257964e052b99af6de1e3b809a","sha1":"64a344e878912b005e439bf5d850ec3a98983d5e","sha256":"2c7c91c537700e0f6fa391fc9c44c8815391fffb6471843c1c9ec7b88cf5af61","sha512":"22e2cec73d98378f8501d317207da80df904fab6133f4037def8dcff2ed3c5643b265140ad69a776d767d88f9bdeed0f824dff7fc191a43b94c95b7c45d18567","ssdeep":"384:UguREQpnHlEG/rlYHvXeD5+zyI41K0QpYcbAYY/1ekxyCCl3zm7d4q8LRlP:UguRHzlYHb0QCNY85xklj6dX8LRlP","tlshash":"73a2c52470b6edf54866c0d0702e2206a12e27551266e8497f78ded84f90e47b37fe7b","first_seen":"2025-10-29T05:48:39.566069Z","last_seen":"2026-08-07T21:57:50.481671Z","times_seen":842,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/header_bg_x.jpg","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/header_bg_x.jpg HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 328\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-148\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe5fb7f569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x158, components 3","md5":"65f4553823b113d858b0ee12e5ce0e74","sha1":"93aca1376a3339336a834df015b0bebda6f3590c","sha256":"0f5bc32d8ec32a713e1b216022be185f70f521cf40ba371ee03910d6b94e14b2","sha512":"282e1593041faac11bf023439db75c092c88711bd9cac77caa1e1aba8aab218e233f5d1f3bd18951ee4ed66dd9fe2cf689350237da10a01c8c3512d29851cfbd","ssdeep":"","tlshash":"a5e0a7772a459d27fce106302571c629535d2be991175f0e389d35107b210da1d40188","first_seen":"2025-11-09T23:11:08.930133Z","last_seen":"2026-06-21T05:12:09.686324Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0de124.7c2020e3.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d0de124.7c2020e3.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 475128\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"69018bd1-1f4\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6dc0e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (500), with no line terminators","md5":"42b947aab92696ebd83b764a3f85812a","sha1":"f9059cf2f330002491bb75dd629811d497467631","sha256":"48983c18eba31150e4fcade6801299b6caed40db59cae58db55cc8cd5caa2f12","sha512":"beab7b37e1866c2f579263eea46189d6b3eba21bbaa2477799e676fd8fb8a3bec5b58385838284f2c1ddfe22fdd50492be9082be3da11480b90f404206b2e36a","ssdeep":"","tlshash":"1bf09e74700efc7b2df5c5462527334625de240e5a3f26e99bf045503f36dd1862024e","first_seen":"2023-05-05T23:00:50Z","last_seen":"2026-08-07T00:49:02.456423Z","times_seen":729,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/btn_game.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/btn_game.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 13810\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:53 GMT\r\netag: \"66c42ebd-35f2\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d1d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 304, 8-bit/color RGBA, non-interlaced","md5":"f4aea7132fb53d3bd22a8817cda6204a","sha1":"6c9236b10293c6df494405d4500469e7998fc755","sha256":"b07036cfde7b8be72d4ee669e50d5df9fcd59b18ec2a93dfcba4ada5cca29db5","sha512":"68003dcf2ca06f3e0d99ac151e55146bfd3c71c6873a128cc244319d93d28325c214f951118d6fff4817fd02639cd292bd3861c4e827fe2b941bd172fbb3cbe7","ssdeep":"384:n2blxWOjwCvs3lhGkuL1DuujjH3VXhbj1a:2bhjwCvMGkQdjjlVBa","tlshash":"5b52bfc8a435111a76fd1406bce47623c831b1d94f3333676e7364ab68788a92343f2b","first_seen":"2024-08-19T15:01:00.968243Z","last_seen":"2026-06-22T01:20:31.618636Z","times_seen":9,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_game_enter.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_game_enter.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3562\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-dea\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d25569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 67, 8-bit/color RGBA, non-interlaced","md5":"00f95f3911284c29fd871801296c6100","sha1":"316a2cfd9b68ab7e04d7eff513b4042472e5d3f2","sha256":"4de4fa07ec49f9d5e50c4633b6b73a0eb00d7cbe4795761f27aae428b58e7c05","sha512":"9028e8bb7058d94b6d231e9f476ccf2287c32ef9965acd0dbbb43d476cab8bdfba414e5664bdf0abc04e2a7bdb0dfe0f6ef8f602ef6b1b71386aeafe010aa3cf","ssdeep":"","tlshash":"09714b2cb27493edd90ad6533be8358229550a13bd038430f65afbae2ce69dd1442237","first_seen":"2025-11-09T23:11:08.932821Z","last_seen":"2026-06-21T05:12:09.615128Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_card_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_card_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2639\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-a4f\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d26569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 59 x 57, 8-bit/color RGBA, non-interlaced","md5":"14f13d528b531f00895b66a89573324e","sha1":"bfd84e994a27d645a04990c6880005c8ef77302d","sha256":"50676b7f053890c6dd8c6d95dff5f87383c99d9f2a137525193e3f6433e73a34","sha512":"6f738e2cc22d2e305fcf51451091fee455fed00083c55a00e33bb0a27496f456e271f74c032d2806e2f0dc51b318be962d130675814769a2a797e6fb2bc3ed3f","ssdeep":"","tlshash":"7e513bdb90f85f5e2638b5203a480857d912e284c2965f803ffad4be0890ad205fd38c","first_seen":"2025-11-09T23:11:08.934208Z","last_seen":"2026-06-21T05:12:09.792123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/save_time.gif","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/save_time.gif HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 12985\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-32b9\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d31569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12985,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 140 x 140","md5":"4a9081cfef0b6854bff6ddcdc65bf522","sha1":"2da9323976611f75bb4cc295b17f20cdd633bd7e","sha256":"0416b7217d11f196add13042c0e1cb41547deff25d3d8849af31839fdf7928fa","sha512":"02b92ee8b824eb27becda3d67e354d8c76380f34e51f7976df4d9036e476bc75d3fad42e6d099c8202da7c5d6d777238d19d60dd38bc5fdb02ce17ba62e3f4ad","ssdeep":"384:zuc396RsDNc+F/ktHi6mO/bLQDm5SnQDTo1/:v396eD7sRBLQDm5SnQDTol","tlshash":"9b42af2cbe99584d617a1aa338a4285f1ff1f4d059f478703a9c981d9d202ff869c9cf","first_seen":"2024-08-19T15:01:00.950756Z","last_seen":"2026-06-21T05:12:09.65661Z","times_seen":6,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1677312/images/162796273264.gif","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1677312/images/162796273264.gif HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1388\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 03 Aug 2021 03:52:12 GMT\r\netag: \"6108bd6c-56c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=CMoB6GZvBROgXO2oJu0dIOOha2Q6cYqakap3yllt0zg-1762729832.0159595-1.0.1.1-ejVGV1plZVTv40dUgTiBEkUxaW8kM4AkRfiXizRuYto; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbea1e14569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"e5f49d4212fec35b11b76cd616e1f8ec","sha1":"0697a3b11f5d0906b2d1cf59051b46ee3b5dc72a","sha256":"c34ed994680ca6446b85dd47aa963cd4cfdd07180a9517b4d7d37f3c7a1b94cd","sha512":"a7057e7e9cd4fec2ca911ac507ce7161412f8813453ceb3f2a1d28380fdaadf1e8d5119eae83f92ae001ca7f8a2cf0f0c0369a8ef2af4d751b6a08053c3efc94","ssdeep":"","tlshash":"3421660eed42b841944c68da3effc81f5651448089e4f4cbb49e6d1b5e1507e54668eb","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-01T19:42:10.901114Z","times_seen":5155,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-465278e6.03c36fba.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-465278e6.03c36fba.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 525322\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"69018bd1-1b5\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6dc05569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":437,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (437), with no line terminators","md5":"5feddd4b03687d6531e174071f6bb914","sha1":"327b7b2af4cb9d18941923f43dd7e3ae77505a97","sha256":"2f478e28492864249725fd1daa4d0a6337270dab02f0113f998c2c4cbcffefa3","sha512":"411b990b8af1f6443b89643910920d33235372709c50a7c2ca62a66d7cef219efead094a1715edab6e49a06ffc382b8694afc731e003034c8973b3ecc9c8cf36","ssdeep":"","tlshash":"0fe05c5c70a2f8b936aa90d8104b7794909a541a39165ee589f4c5c07730ace401ada6","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-08-07T21:57:50.459854Z","times_seen":1186,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_service.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_service.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2818\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-b02\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe60b8a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 84, 8-bit/color RGBA, non-interlaced","md5":"782de884dd4effb0283d2d230036e49b","sha1":"3a6060299fb5ea20dd724ded3cd589c9c1331ade","sha256":"a1ff74bf7687f09d3848a6d047b85eb7b7da06a2e8868ffff318250c70bd4541","sha512":"1249547ab030c7c35419d73f8e45539932f10914dafd10de1bc4cb9f7f3132dd67c50fcb41058a4457bdf2512ffe34e37d5c951955f6e4c1983e2ef86e0e5769","ssdeep":"","tlshash":"d1510bb1274155a4eccecb5686d9419bab130c4660af6a04fbb73c481c483a2f55cb7f","first_seen":"2025-11-09T23:11:08.939228Z","last_seen":"2026-06-21T05:12:09.793261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img03.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img03.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3085\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-c0d\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe60b93569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 76 x 72, 8-bit/color RGBA, non-interlaced","md5":"199be3f8d94957d3eaa22c8c4f1e22d0","sha1":"1fb14c062efbe86340a2492e4fc6ee4665b3e71d","sha256":"0be9a7fcf9828cfce9b8748bb27a0048a4cdc111c34104e640e1ee01a76062ac","sha512":"f950b1f58077cf4f9e7fe51535fb17e8a89ef765b0732fc050a8a7b3d43ec4632f5f00f736294da864719f1b78f24f4d7d9a4f241cd4341049e3395f42e6d312","ssdeep":"","tlshash":"66514cffd6ed4b0c981e0be8e958559fb1e6dc537e0b731f5106b4a1a90b4bc1818a22","first_seen":"2024-08-19T15:01:00.953949Z","last_seen":"2026-06-21T05:12:09.732884Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012643445.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012643445.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 336823\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:27:14 GMT\r\netag: \"625aee62-523b7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=i22p_ncb6Y6_u9xm42IJ6taxBlOXF4wlirQHY3NHP8k-1762729831.6925151-1.0.1.1-NZ7KXVLW5yGVlb8P2Lzcn7W3mJRewZPzHytAh9B7eec; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe81cc9569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336823,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"252f507914717e16b33f8021008dab1a","sha1":"eca4fc122bcb3107450ff1243e2e4e69c2782800","sha256":"62f2b022163cd2f7435e29be22f4a5b9c703a89ffb00a370e3f487540fa67bcf","sha512":"1b455647c83f51380b8c82e37d7db02912a40bc11aa272a27245cba1194306173db5520c2ed5b378b99a2489a94632cfe07ec859bd94b9df80c29a4e36e7090c","ssdeep":"6144:ahLDbLX9Iw5Vvx2AoYVqT8m4kP3NtL9kn2TgzUSxo7WUi5TlBA+mgA9:a9jX9I+5pRqom4OHXcC7WJl++mx9","tlshash":"9c6423e17324dd16e790df61046ab720e72a29e5970be9cee25184b3f7724d32b0417b","first_seen":"2025-11-09T23:11:08.941336Z","last_seen":"2026-06-21T05:12:09.752048Z","times_seen":3,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_container_top04.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_container_top04.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 13330\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-3412\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d11569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":13330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 295 x 180, 8-bit/color RGBA, non-interlaced","md5":"623239208816804b9504f1c738a6b14f","sha1":"87458440ec5a7d1ec44f39d30977b21611dfa26e","sha256":"f8f33f42240d98a91e70f60a975601c5c4134e57e84c8657cec120986b53a3cf","sha512":"71ee00252c4fc6c1cb3f3c386b6144511c5ce024fb0ed134f954d5738b2ad1a32ed948322b838d1e9e138f43d0b583d64d7d9d270bbcd41b54015941a8b2e233","ssdeep":"192:w6VrFI4nw531QEfdPPkzhp2zrDYUbGuUCk/BT42HDo7WPZzfdvea+KsTyFmKxJ3Q:w6Vpw11l8zhqZwVBzc7OZz1vCKGg2N","tlshash":"3952cfcf6396cca29a60cbdba320dcc43ff417438c64f7944ac31595468999e8dbe506","first_seen":"2025-11-09T23:11:08.943169Z","last_seen":"2026-06-21T05:12:09.678584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1677312/images/162796271560.gif","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1677312/images/162796271560.gif HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 221\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Aug 2021 03:51:55 GMT\r\netag: \"6108bd5b-dd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: _cfuvid=qcSlVtQM08Ojy_koWkrK.4Qoq0NX3b4t_8_ppykJOc8-1762729832.0156133-1.0.1.1-tfAPMGEGVHmuS0BJMAlk.hVU_NpPqmroBjCdzbaDVak; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbea1e13569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 14","md5":"0dce98cd63f5bfd333e2ead45907229a","sha1":"8f41413b5bdffeb9ba8f600f1ce0af02fff66e23","sha256":"b13e166760c62ba73c934fade29e79626a1b896b866a6c33ea923ac41a09e1a8","sha512":"029096565745d173eafe7d294e072cbff5961a1fdb4c0c4d7a9b397543d00033e89e2f49daaba0187bbfd240f9381ffd642863cb0615c294e263f3c1abd436d9","ssdeep":"","tlshash":"13d0229a443b3008fcdc90b8ca8d8eae39087208c6ab248b3e68af03f5009497802242","first_seen":"2024-08-29T17:51:56.3827Z","last_seen":"2026-07-18T11:56:42.089832Z","times_seen":17,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/element/info/aio-download/lang/en/qrcode_a.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/element/info/aio-download/lang/en/qrcode_a.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 26534\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:39 GMT\r\netag: \"66c42f27-67a6\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 32760\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbeb1ea7569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"3b62f5a7922460b6b746f070bfdb8553","sha1":"def32bf44e113e2948b896050b3102a289f2a44a","sha256":"7f59c88a93c60dde4eab4bc536373b975b1eed2215c8be7027a516797ba70b7c","sha512":"350e2caa97cac33f36c88a001ffdb692327f85f31cb07f8dae9ea25beccf343b7cacb9b657f51a80f887afd751b5bd05153ea98f1790fa676f5907c4764ebbc3","ssdeep":"384:1amqm+NYlkLGvy8kqQD7VhVj/Z3aDln1eZ3FgDVvdFp/u+n/fO/uEhlz:1Zl+XyvyrpvVVqx1eQRvPcOfEuEF","tlshash":"7fc2e186e5f6e1e5803ad1785b32fc919f9adcc6f88215b8c8aacd52a08130c48eed54","first_seen":"2023-07-08T18:14:46Z","last_seen":"2026-08-05T23:37:41.218665Z","times_seen":208,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176120366120.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176120366120.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 43965\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 23 Oct 2025 07:14:21 GMT\r\netag: \"68f9d5cd-abbd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 180938\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=buXHVwRsHob6RdNMzH.IiGIDH8.vucEm5zYcjzFSnJo-1762729832.1919026-1.0.1.1-vBpPQEKtHO.4GO6PQB979U_v3hEgke79WnjuAGCoa_U; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3eb8569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":43965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"5e44335c30bf8e15c2a5b2deb3c56008","sha1":"40311b8e965e1ee5284ce9686bbd83647fc239fe","sha256":"c4a5d0030746a8a337b5303782a1d2b5846dcdc9f2d6d1a38c60ab8275333ce8","sha512":"99dfdd7ca78106e4d47d6ebaaf58b7cc8265d5cb35ce61375a15303f3988a5013040b4c64d516e280dd3e45b0965df51c592c05dd5abc7d28a3c56702e039304","ssdeep":"768:4AWxkDPcPOB1ONwN2xTngSOyImRYQ2Bb2Zb55heAUKYmCJ1+FRaqN:tC6Pi8N2VCD6YfBb2Zt5hFBYmi1+l","tlshash":"5413f1624b296c03a71d1fa038fdd22d54eddfe008d94d087284ba663e73386f54da59","first_seen":"2025-11-07T07:50:11.942255Z","last_seen":"2025-11-26T12:39:16.060509Z","times_seen":43,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/site/macaucasino/ver2/js/site_config.json?v=1762729830113","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/js/site_config.json?v=1762729830113 HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nIf-Modified-Since: 0\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\netag: \"682aa2cc-2af\"\r\nlast-modified: Mon, 19 May 2025 03:17:32 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncontent-length: 687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"68fcd67188594872d0ac024c4e36046f","sha1":"db4aa4919edba46e0ad3ab7598712b298fa799f2","sha256":"f96723d571fe74e51655043721658ed7e0ee8cb2f7a3cf65381101085a7b5268","sha512":"cc2f1523b6d84091af2900766d242d3b1da205d38bb5d086ba168708e3fb0d90ebd4651bf0c6fd5ecd56062f5677b821f98b542d24facda1014b794adb07e050","ssdeep":"","tlshash":"b201249be4588dd3920a1893002e4501b12044af0d9cbe813f8e350c2f1c67fa8b37ce","first_seen":"2025-11-09T23:11:08.949263Z","last_seen":"2025-11-26T04:35:53.827653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/site/macaucasino/ver2/css/lang.css?v=2","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/css/lang.css?v=2 HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nIf-Modified-Since: 0\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\netag: \"66c42ebd-a22\"\r\nlast-modified: Tue, 20 Aug 2024 05:50:53 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncontent-length: 577\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0f1e79cff22377c99e3c6dcf747ed0d0","sha1":"e28bf57cece537be9458f1f26217c4d0b752bd9f","sha256":"af3a2def73999dc3a99416a3b8a9dc26e7dd98a78067b0151c53bfbb6e2b64cd","sha512":"f5080785e1f2e8943ffbab2d34a507bec5de29e10f02e6ce51f1f2f9eec8b48f7a6d79e1c8d35008e2b6c6c4f8b36c69c11b65533227db271f617d8b9e6af780","ssdeep":"","tlshash":"40510225f5d569ff1014e025aabe221a5b1df90ab116bb2e735811737bbd123cc302cb","first_seen":"2025-11-09T23:11:08.951409Z","last_seen":"2026-06-21T05:12:09.58052Z","times_seen":3,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/esabgnixob.js","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /esabgnixob.js HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7256,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1cc3eaa038cc74d92125beca718c3694","sha1":"74669de3bc1956dd1f84dbcaff0dd0a86f2f0b23","sha256":"b9a82b7c9427ed5314675a17ed8bd60ed07f4bc59b22ea64f334c6fd9f72fda3","sha512":"27f0471ff2a060692dc73bcf94e693121d4dcae21488799af27c437d5c410f122b4513a2aa80e5469af2b0e95fd8395345b3384ead1a4c7c433c04a60809b3a5","ssdeep":"192:+WiHTtKnCTcASyT9Bjkbz66B7z6+EzEJhLhiPufbM:+WiHBKnCgASyT9BITXjM","tlshash":"59e1db9608a70102b2475cae23cf3232ca1ce1572055cc317ffd6798efd29665b9ab5e","first_seen":"2025-09-11T12:15:42.904835Z","last_seen":"2026-08-07T21:57:50.457983Z","times_seen":970,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5bc6f1fc.f02dbf5c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-5bc6f1fc.f02dbf5c.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 180938\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-18ac\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5bb55569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6316,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6316), with no line terminators","md5":"79f784c0bcc2ecdb08fc8cebbb2d8e5e","sha1":"22be47571cd2107530a90be5add6e2ece83ad042","sha256":"e054233b8d328e238b0a2945dac64cfeb6d1d3d6e90279f132e85959b3934180","sha512":"83df53cc992ec1ee6e3da7d1b0f88a79ee225c2f231d8a7e28e4f2ca94404b0c68c5a101e608de59121bf894e1e5d000d9a7aea2d316ed269a8b67475077a9c5","ssdeep":"96:1xzXHp9flwmXNd9vXO6SJGzcrbHnDMBvZPbqKjjDCkuqeaRuQ7uEiPR:Lzbl7NdF3S+gHDMjTqKMta8EiZ","tlshash":"a4d1b679b8677e3b0951806a24bb71c171ae1945ad6d5463f6ffcbd04b2180b0336f1e","first_seen":"2025-09-07T10:11:57.821186Z","last_seen":"2026-02-02T01:17:12.771786Z","times_seen":386,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img10.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img10.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 5122\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-1402\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62ba0569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 72, 8-bit/color RGBA, non-interlaced","md5":"b026c91b3d8b98c7c07080fd9aa8cc1e","sha1":"d76b83eccc70ab1921f57a014334d7e1f2de53db","sha256":"03936ffa50e556c00268ee68e9295352f2a06fd8903c8aabf010a02d816ae7c2","sha512":"3b24213ac13b88e0835fb315018eba7b736a2e9d4ac764f008dc19b34adfd38f142984ed0caed3c22e5b25adc0d9631b9ed1dbe99c2663ecc98d12bcaf608c77","ssdeep":"96:i9PeWwCg6zFrmEjp5j9bATI22vUhfdoTu+NbVfzYqsS:i9hzRiE9xgI2Xhd8u+9yS","tlshash":"4eb16da31a4a9168c228a1fbe4797bf06e67e06d8954f505bb0696e3370d00c961bc37","first_seen":"2024-08-19T15:01:00.959037Z","last_seen":"2026-06-21T05:12:09.794353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012628830.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012628830.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 344558\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:24:48 GMT\r\netag: \"625aedd0-541ee\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=P9XgmSF.KSpNaCnT9HxTmKNNy3qNNKSvq.Auh_dMK2g-1762729831.7209342-1.0.1.1-bFazVvJoDiKfIEwKwE4YG_i848ULdlFgT5.E7VaeyN8; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83ce4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344558,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"45efa59a04b0b16344e92da49fa5b979","sha1":"0e087a78dbca2d9c19191b79d8cb5db2778d69c9","sha256":"09b96e903c0c8a973268823366f1f382fc18e9b4b86fd889bca0772b6408b8b8","sha512":"b4c28e39f01c3198af5e97ab8acb419fd890e148df218b9a6c6fb6465ac8f32c76389861ee8cc6335c7805922bca41a4ed7a97afef50384d533cf16da3284ea1","ssdeep":"6144:wKfBqT6Tx8JATJv85AHwMY9lyjMcwAGuDheg05mwB+eAwu9eo8D9N:B5fl8JATJvmAH/YLRf6hnwXlWF8DP","tlshash":"3b7423c085a30c78f7fdd5a4fc5b97a7ba68865326669f0810e7b992007db42cbf016d","first_seen":"2025-11-09T23:11:08.956312Z","last_seen":"2026-06-21T05:12:09.675597Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_star_img02.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_star_img02.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1859\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-743\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d20569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 32, 8-bit/color RGBA, non-interlaced","md5":"89a230b9255dfefca22ca7af84c828a7","sha1":"f1072b214df3feec31368d782067685792d7b776","sha256":"45fc78016269021602034612281e7606faa41d807ebf46a155d610591f4f1762","sha512":"f215b1b5c34c79e3b400530e93ee8635d140f27b0490db9512b1fd65f283c7a5a08d6c39f167be4d8d892a9160c95e585c0549b8e4f7b56c6224e3b4b27bf6a9","ssdeep":"","tlshash":"6131d79dee112940b1aaf59332fa183b8e2a5481d99bf485b8ebc47614301bc015c5eb","first_seen":"2024-08-19T15:01:00.940299Z","last_seen":"2026-06-22T01:20:31.711546Z","times_seen":9,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_fishing_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_fishing_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3208\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-c88\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d28569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 57, 8-bit/color RGBA, non-interlaced","md5":"80f80dbec2f4ff1864791c66b655219d","sha1":"6326cd02cfcd1ef4f66a0a2fe0cca673f90fba8e","sha256":"2bc3868b85914e03239f6f7568deb6fcc151865874124be586d8ee4a12157fef","sha512":"b700c9220980c73a375570a00949bc11b5f05d7605809249bb8580b8122d949c8b8ec4d03ff6650ef12b2349773cd47ca8e3446c60e0195b62ecb64d7b433563","ssdeep":"","tlshash":"af615fc253702d1cf76be91690556e03a42713a11d508568b3807cbb9c3dbd1057ee3f","first_seen":"2025-11-09T23:11:08.96152Z","last_seen":"2026-06-21T05:12:09.755302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5PQDSQV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtm.js?id=GTM-5PQDSQV HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\nexpires: Sun, 09 Nov 2025 23:10:27 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 09 Nov 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 121957\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":448382,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35300)","md5":"48e36af804cc45b949b1f553a40c4b87","sha1":"c1ec73b55071268e5731d4782d75a0b40025e858","sha256":"fd39624aad6b311fe6d1bfbed713c64e77886fee064db8635fcd1fb2b8cc9e78","sha512":"4585db5d71718187305b65b88eca74a6faaaf34848d54355d2c1b25f9fb08e43f9572d267cdfc643c3595e4e30b8ee102063a68f9733b1f99681ad038dae1d3f","ssdeep":"6144:+Lxz4Xf+astDi46OZd0CdpIQmYhrc/XIn:yzbaMiEgYhz","tlshash":"9394fbcd728974b5c3a6aa31402f090e757d24a7b48cf851e0a6ccd42e7497d71a3fae","first_seen":"2025-11-09T08:17:45.973955Z","last_seen":"2025-11-10T07:35:16.599581Z","times_seen":6,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":158,"dns":4,"connect":7,"send":0,"wait":35,"receive":26,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www12120719.ats.elegancepath.online:3637/api/info","fqdn":"www12120719.ats.elegancepath.online","domain":"elegancepath.online","tld":"online"},"ip":{"addr":"76.223.106.153","port":3637,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ats.elegancepath.online","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AE:24:97:48:97:14:27:15:36:2E:61:BC:BF:A9:CB:6E:C5:51:80:21","sha256":"09:C8:21:F8:57:42:79:F6:F9:AB:21:E7:6A:74:94:00:7E:D4:CC:B0:F6:0A:97:B1:D9:0F:82:30:0A:2F:8A:DF"}}},"request":{"raw":"GET /api/info HTTP/1.1\r\nHost: www12120719.ats.elegancepath.online:3637\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: awselb/2.0\r\ndate: Sun, 09 Nov 2025 23:10:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 36\r\ncheck-resp: CK6u06Vu4\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,x-requested-with\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ccb058cbed58d890d26e413e75cf4d12","sha1":"7c7ec5bc942c0becf296ce5b874174959acf9478","sha256":"730d051f9c0d50111024d3c6962f585cd28e501928bdbf590cb3bf263a50b427","sha512":"0b3e95efcd4b0f13f74ea9884e2e469f9dcb9653dc2b6f9b7c67041c960728b688b247044d7f74f1b2cff6e45b6efafb0e2ee3903699ff10b5fc8cde733377dd","ssdeep":"","tlshash":"5e80008c28808233cc32a8a3a0f0eb0a23203888220a002200c8080ce3a02b0f28af38","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-06-07T01:20:49.445558Z","times_seen":962,"resource_available":false,"data":null}},"time_used":1777,"timings":{"blocked":773,"dns":54,"connect":18,"send":0,"wait":228,"receive":0,"ssl":701},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"www12120719.ats.elegancepath.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/game_picture/ver.json?v=979294","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /game_picture/ver.json?v=979294 HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nIf-Modified-Since: 0\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\netag: \"690d70ac-16\"\r\nlast-modified: Fri, 07 Nov 2025 04:08:12 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncontent-length: 22\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"796e538d7909db5c6a662b15e9e2951f","sha1":"2b10302690055fe0be74a6484792bb0e6e20d8c9","sha256":"a4695a995ceca95fc1c986960b88d6a2bf015c3f9d1b5073e40b735de2b0cb88","sha512":"49d0230e39e2ae2b603af75c64f9cdcf6befa87027a9c66850bed99275db1d42ba5ef242271d1b26bb7fd44a9dfca5286892d43e17dc6e6d413eef297a940295","ssdeep":"","tlshash":"5770000a0200b82a00a283200800088ecb200008a02000008202002032388ae8000000","first_seen":"2025-11-07T07:50:11.835578Z","last_seen":"2025-11-09T23:11:08.966304Z","times_seen":12,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img13.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img13.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3445\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-d75\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe63ba9569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 72, 8-bit/color RGBA, non-interlaced","md5":"4f05f2ecd05c473d29d737245fc693a3","sha1":"bad728c1f1539e724322efdabb974a76a6c34955","sha256":"2864a90045a8b4120def0581ed2cc11241aa86fd36dcfe899ebf00d42d48fd02","sha512":"6805e91af19b08fc4a54e3c213d6de4538a38d1e7a4ee521d77ec5154014d04de9a4867b1feadc910c9424bda5dcdebcd364836908356072b8f99a545cafe69f","ssdeep":"","tlshash":"78614c47268efc17bb9b4d2225772111ac4b6661ef1d40698d5ec4fd31248e3f223606","first_seen":"2024-08-19T15:01:00.961659Z","last_seen":"2026-06-21T05:12:09.665019Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012613055.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012613055.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 375713\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"625aed32-5bba1\"\r\nlast-modified: Sat, 16 Apr 2022 16:22:10 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nset-cookie: _cfuvid=GDQj3T7CPNTq0Dgu.3ZUzDvKMmVvMr9HjsWmzxy1u5E-1762729831.7217395-1.0.1.1-3vGrLeavxzakSUIIlz0ZjaNcjI4pLUZvSut567Kx758; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83ce7569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":375713,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"05a3b87c62b39a6e304dd18f7b6e0817","sha1":"50fb9279fc457ce0fea3092572c06ea53c2c029a","sha256":"e16db866b48ebef71d6494d0ed3b1953617d0b1d3a73376a2757df2946ea7172","sha512":"36709b90afdcc87d01f2087bbb021da2828763dbbcd44f2312c1c56032ae0fad087c77b1b298117250f6932acd7507473eb1cd4fee6afa57eb4738545edb00a6","ssdeep":"6144:WUXXAheQLvN5lk3jW4QgOs5uMhK7y/5Pw0yOrv2XU1J6e1F/7ei0KTz0wn1EZj:W1YsFnuOOuwCy/V/reXCFDei0KTAwnyd","tlshash":"19842362d5b88c82f2ee4734e6a95bab42c49489772f23cb726185b5e9701cc391e4c7","first_seen":"2025-11-09T23:11:08.970024Z","last_seen":"2026-06-21T05:12:09.676943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-12091afc.c0b8ca34.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-12091afc.c0b8ca34.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Apr 2025 03:23:51 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 2246265\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"67f5e847-1b6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe85cf3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (438), with no line terminators","md5":"f6360aaa61eac5e391cfa7e543d09e95","sha1":"3c5bdbddbba975afd3bae7b2937d71369bbaed21","sha256":"0cbfaac588f99dac092f8507c79e74be39ae994bb1164127f4e8a3e5993dd28f","sha512":"819c10a8587fbea8b7ea45ffcd79f0caaca96a2936813572fe7a8937ff58cf1c60eee1847cd2817fdd010e91f6c95806fc32069278bd4f235d67a463e6fd633c","ssdeep":"","tlshash":"dff082e510c7c6189432893a6a76798e8150c32de34fd926f1dab32217c62404e23577","first_seen":"2025-04-10T03:02:11.11501Z","last_seen":"2026-08-07T21:57:50.555921Z","times_seen":977,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-b5719a9e.5e91c4a8.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-b5719a9e.5e91c4a8.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012965\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-bc6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe8cd51569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":3014,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3014), with no line terminators","md5":"a87a09d32204c4825592e3c1109c663a","sha1":"1ccc05a828fa3989d7c3f627b66d141017ccbc8e","sha256":"6df9da48f80894dc881fa669bec8965cf74d99595e41371c7325ad1133abdffd","sha512":"3d1e3e40d0ffbcd20fff0abdd94d6295af6fca9d026892c25f4531833776f463b01d80a6756b2aa3dd8d0f7a3daff97a5709ce2dec94e0b817fd609d17070163","ssdeep":"","tlshash":"fe51f949fa45f99700f24191882f6a27f2652b08742bd0067770ddc9da244ef92bbe7f","first_seen":"2025-09-07T13:01:15.210197Z","last_seen":"2026-08-07T21:57:50.517638Z","times_seen":844,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-1e5e0394.ce4d0476.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-1e5e0394.ce4d0476.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-38b2\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2a961569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":14514,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14514), with no line terminators","md5":"f8fb973c3beb3440073ae8d1ebcf50b3","sha1":"cd53a77c74183ca45d3375046980d7a392c7dbea","sha256":"66767e708175192e19218bff22e746fa132ab6b0f7640e47a2b98cb1e6dbbce2","sha512":"a7fa78dfb53504a2b2a53bbb4b6dda2e586712ec16321b2a89521823cada539592fb378765cd6a74a071bb7efed4dbbdcf21a4af2c5ad32fb828f1753de6e7cd","ssdeep":"384:DwpLDGD1DTD30DDDwDgDiDND3Q3D/VDnsaOYz:YiaO8","tlshash":"7252125c215b849fe03bd1bb54a439de0a28135e82068f3cfed770a44c9f191be2369d","first_seen":"2025-10-29T05:48:39.459174Z","last_seen":"2026-08-07T21:57:50.507972Z","times_seen":842,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-572431ec.dfdd22b5.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-572431ec.dfdd22b5.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 518514\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0c-ed\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe55ae1569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"aade5f40fcdad3b70e5667fc036b8308","sha1":"193be9b4846838a1662515d1fe2833e0f6691ea4","sha256":"6dec5d24c680339b44fe23e30da013b74b4889f1307d453937e113a64f4c5789","sha512":"54adf7c7aa1598ca0ee908f3e21d24e84649afeae2650f5ce8b698b2c82a2f6a3c8de4f83536eed4b1bdbb852fbe053f144736d7ec3d65c414c0408a44c53041","ssdeep":"","tlshash":"7fd09e5e5cd31fb688116da9dfd7b305f911b01951eb82afe0860fcc055a8555653428","first_seen":"2024-06-10T08:09:49Z","last_seen":"2026-02-22T16:07:12.490738Z","times_seen":627,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img04.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img04.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3752\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-ea8\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe61b94569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 72, 8-bit/color RGBA, non-interlaced","md5":"f775a201901d52b9f9c1583d5b386b06","sha1":"2cb78372ac45ebe48e51df29420a35867c9726e9","sha256":"879efc95a72b8295f1f69930ebf6496e1f670abace1ab16db6e8bae91f6f22a5","sha512":"83e9d4c74b2514074f5dd5a333d41bb094e9c1a06962a5df6e5bf494f8b0a2d122547a931f01c4d616334c550a8c02c724366e1c2b105559e64e96022bf6204f","ssdeep":"","tlshash":"33716cd3a19b81bc0af3c8e3735ae862c8ab60b4031d55040b74893577ebb3566824b9","first_seen":"2024-08-19T15:01:00.954609Z","last_seen":"2026-06-21T05:12:09.641486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img08.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img08.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 6600\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-19c8\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62b9d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 72, 8-bit/color RGBA, non-interlaced","md5":"d029e926d909d863970dc1d6854d371e","sha1":"a7f67f8f73583c33b1954b4e7b8f26c3fcb80bea","sha256":"3ced71e602c30a8a574dcdfc4ef85bfcdd66ca2d8c11ea66ac1d1c77dd62400c","sha512":"be5b2b7f610a9acb0ab191c3709104dd57265da93a753ac00b8c3e03b70168a1b194b4a3883b74b38c316d55b2177619d96c4cb892c2b4f1496fe2b720937185","ssdeep":"192:IkAcsJo4HnrBKcKlTUJZDJvZZgvaNc1qvne/Z7fpL8Q0:INnrUcYUvvZf+qyNp4Q0","tlshash":"dbd1a09c578fac148632dfa15df4e85130090df578dec1a4d514c78934f79b956d45f0","first_seen":"2024-08-19T15:01:00.959675Z","last_seen":"2026-06-21T05:12:09.637153Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-17b675f6.e214295b.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-17b675f6.e214295b.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:55 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 262464\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0b-2e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe85cf0569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"563defec0233db645a4e2db4fabbb28f","sha1":"f879d25b33bec3547b17cc7a03607373fe81d5a8","sha256":"a7dcca2f80a91b105d1cd25c48a9ea88e4ac8021b7db91762d8f6ac0d4e08388","sha512":"05d939ea716e25967f2ca09de994e5b2db241cabe67dab916f6b42e07545cbb069f8e3d67624ac75890ed671eeaf0ece94251fb6f3e1a51c0b54e849086033e2","ssdeep":"","tlshash":"c19004fc0d31f035c1114115704144c4757d711f17351d10cf107f53005530f145c5c0","first_seen":"2024-06-10T08:09:50Z","last_seen":"2026-08-07T00:49:02.423231Z","times_seen":762,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/withdrawal_time.gif","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/withdrawal_time.gif HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 13585\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-3511\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe8ad37569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13585,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 140 x 140","md5":"15d84726a25b161b592c938f86984623","sha1":"8cd5bd3df3a8c7fe6817fd35ea6e754df452bc50","sha256":"026512569c9b36d4042d511fce0b4e5e256e5f9dae619e27cfbdb51efc61aec5","sha512":"aa557f4ad4afd36aacec505ad8fc585bc4ad3672119be288436709385873d59eaf935e6cea962bbf1160da7f5dd588c18f06512b94fe771106aa437355ee8380","ssdeep":"192:DwwIHI6VntWPyLC8xghBLp+0PwTTuHpxdp3+FzsC+MP9seQ5ppayEEEqEqDKSBP8:DWIcFaBLp+4wTTulx0IDM6wzqzPzCp","tlshash":"8852b01a450e5f06804abd8135f6ef1d5cb4f0f00af5f6bad05dbd75a42682c22cc5a7","first_seen":"2024-08-19T15:01:00.95263Z","last_seen":"2026-06-21T05:12:09.735564Z","times_seen":6,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/element/login/password-icon/grey_dark.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/element/login/password-icon/grey_dark.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/build/css/chunk-c6aa0208.404b8512.css\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:52:45 GMT\r\netag: \"66c42f2d-264\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 180938\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe9cde9569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 24, 8-bit/color RGBA, non-interlaced","md5":"9ff961e5d0ceb010c00b3d62df6faa41","sha1":"3a993a6499794da568e3fc2510ff018e600167c1","sha256":"1f58f94f4edb3bd1a7eb4b1d66bedce259c958a4de4678d7f2fb91eb83ec51fe","sha512":"be84e1395300e6761a3dc1c1b1070870fecb6a5299c2b8b6e400c0d1d0ea6739d4d7dc624807840c88d3295e408ec7b0ac31f7e99957b64ef4b7d140c44d025e","ssdeep":"","tlshash":"4ef0b7e5f8406f328962eff74c980005e02902dcc0421b086024c430585f0cdbcb6d9f","first_seen":"2023-07-17T18:28:32Z","last_seen":"2026-08-07T05:04:43.876628Z","times_seen":170,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_175998206578.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_175998206578.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 38665\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 09 Oct 2025 03:54:25 GMT\r\netag: \"68e731f1-9709\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1798328\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=DbNq.f7zIjRWxQ6XDNmHfFVIbdLvG7q2PP4trTqNKWY-1762729832.2143893-1.0.1.1-FNu3EZn0vY0xKKzh1vnkstlE1sxemeZQikhLVgxle04; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb5ee6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"de6908143b027b8593b83d48cacbd211","sha1":"e3cf230cb959f152db9ed6f5a586a6b44cc477ce","sha256":"a4151352a00427d73a42d65973cf6eb0d497ad6ffabed8ce99551402cdff23ff","sha512":"43b1b7d8fe9bb3499e49e09426963884a4c73c464d9fcd644142ee67045734dc799b680a1deac2a9c09b5ed8a7f893867996c2f0c5a976e9bf8e024706983bf2","ssdeep":"768:UhWcHEvi3LtW1pL2pz2YccGNV1Jt9efPKJv5DqVPDRJLaSaO+KfI5dH+:+WckkgCpz2YSPxqiJBQJLaPOpoe","tlshash":"d803f15076c15ac488d5dc4ca2938a0bc2287c30f3e9211927ddb9be0d7a259a5a9fe7","first_seen":"2025-10-20T05:55:43.591983Z","last_seen":"2025-11-16T04:13:47.685303Z","times_seen":66,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-vendors.3836852f.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-vendors.3836852f.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 25 Sep 2025 08:43:13 GMT\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1014302\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\netag: W/\"68d500a1-6c1ff\"\r\ncontent-encoding: gzip\r\nset-cookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw; HttpOnly; SameSite=None; Secure; Path=/; Domain=g4.cldfvn.com\r\ncf-ray: 99c0fbcbed343181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442879,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26436)","md5":"162e48b2d540bd0f62cf8951e1b2e73f","sha1":"7bc119e113300a1a4a1741c6b8d2887b06600d81","sha256":"2af6f3a3a0d88b3d45709184ed35aeefadfbcddec57d0908728153b3d2921c56","sha512":"dd361a0e1e12411967955b6a97c975a9314981d703c67178bf03ef171ccb9e301aee18bdd5d25906c99f1e3036df02897ac6240639a09fc28e7dd132258c230a","ssdeep":"6144:/hWZnyF2PM7Wu7jDRRXXXxzOp1LAK6xGZ30T0aQDqWGOiGxhMOw:/hWZyMPMiuVJXxapj30odGjfOw","tlshash":"5d94d68db2c6b0a513e730e4402f650ff27aa969b44e85d1e221e5d5bcb894e9137f3c","first_seen":"2025-08-21T14:51:48.355458Z","last_seen":"2025-11-12T23:56:07.459328Z","times_seen":159,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":31,"dns":6,"connect":4,"send":0,"wait":37,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/css/template.css?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 19 May 2025 03:17:32 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"682aa2cc-6141\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe04817569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":24897,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"67ca05bb0768324ef8e1f98ad09cbd87","sha1":"4afb04ce79a960bc5d91ba93b90f13ccfd520c6b","sha256":"2c01cb30b4e6367078f9628d3f6576f2bef8ca8e40f7f6099555614f6ad38b98","sha512":"8c8f43466289a36fbebbfc917c9e48fb273ca52ac04f3b699c5cbea0bdbbebac33b5b4ab424a59e4813e70004f3e890017f58c2f4ff7d88b61ac265e6fb760ae","ssdeep":"192:hdDC4O4HuQHtL0P2sxFI1GeSS9GaF9vt7ZYTumEUFPveqPDhGE7iD0g8L3U2casT:3GF+F1cZrPDhGaM03Q","tlshash":"90b2f066e6e72d9b741580797f3e2122330da447910bfe2ebfa4215c9f5d0a6c4323da","first_seen":"2025-11-09T23:11:08.984685Z","last_seen":"2025-11-26T04:35:53.999517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012653948.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012653948.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 298436\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:28:59 GMT\r\netag: \"625aeecb-48dc4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=s6Q81n2P2J0._neKi_19mon7nZXsxiTYHKSc_n2IIbg-1762729831.6933274-1.0.1.1-NVHNs0755CBLsuenFhLIlistmc9sIlrmjINniM2ztQA; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe81ccc569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":298436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"b42ba737ea52ee4e24a16987606ab83e","sha1":"875d724092359e365a33a6c8b162b8a988c9a72d","sha256":"8d43cb0d49d817bb04c550c06a3b480280aee334de4ccbe5f87aeec7fa4ee11a","sha512":"a8a76f7923f794bec196b3d68de5c62fd4e2b8a1d3eff509a0a0d95324e11a9355e2515fcc831125213d46bb054c7f1eb42915bb9ba206954c3bdbd3e9da09ec","ssdeep":"6144:QxNNUZUIAONOhWNGeDbSfLTfzPoPmvgpidXQEQwVzM1Wl/sBe:LUIwWNGMSfLT7vKitjQwVzMgke","tlshash":"355423f2e781ee25d49adefb5636ed26c73e1dd22824d84c80c8600c52e3d5fda63095","first_seen":"2025-11-09T23:11:08.986764Z","last_seen":"2026-06-21T05:12:09.796878Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_175436462763.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_175436462763.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 37639\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 05 Aug 2025 03:30:27 GMT\r\netag: \"68917ad3-9307\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 269064\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=ITXwQ7K06xc9p5MEIQOHoo0.9ReX.HKPTbCulA5UaZQ-1762729832.2140691-1.0.1.1-hHCQfgPqBmytiRLgOsKGycye.GRnqgHpp5AF_Bnj_nQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb5ee4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"b7494ed8bd39dba0981085db25ea62d5","sha1":"596dc070292995daaa4be397e50ddda8a7291021","sha256":"f82f305d8ec803e344ae4ea17527391594a1a45ebadefa5513ae25142bc90379","sha512":"b3f74ff9558f0584d15b3cf877cfd4c1744d621dbb772493cd25d62d162ec02539d8546c8dff11a8b50532fb5d4870ef2ff040c073c087e56dcb37b9ad6a5dee","ssdeep":"768:hliiUYqphZw/O+TjkmM9IpjliupGhDDBpHFV2TG8283w1Odc6q:v8p7z+MlWpohrua8R3w1ich","tlshash":"4ef2e083500ffc3899676991bc0a30e75e646ae9071cd2a73f1e4a22bb477d5e1cd2d4","first_seen":"2025-08-21T14:51:48.457546Z","last_seen":"2025-11-24T01:36:20.051171Z","times_seen":157,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-90f8b594.32abb78a.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-90f8b594.32abb78a.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 17 Sep 2025 03:01:30 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000\r\nage: 262468\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"68ca248a-586\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2c974569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1414), with no line terminators","md5":"008077d50a4126b6cd782fb364116878","sha1":"bee0c77ea632f1e09e92bc2cf625cb51213cb08e","sha256":"88c62c22948ebb5d97f1c60c0df7c58af4816dc9ca85f5fff513dc7f34b4e531","sha512":"6d40d470ed92eb730e324885ea62ad6d1493d3f68f511ccf1f8b00657d1b2ea5efaaeb6c9f3f6561d9baa4c7ff4e2d7eb836d44309e80aec079ad53813c020dc","ssdeep":"","tlshash":"4221156e298b150f8377c70b78c831cc003cea4b9922845f255b3959be832ec34b1791","first_seen":"2025-09-17T18:13:55.418754Z","last_seen":"2026-06-07T23:47:58.354125Z","times_seen":768,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-7734e6f3.47b0b2c0.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-7734e6f3.47b0b2c0.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 180938\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-72b\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c87569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1827), with no line terminators","md5":"d6a6ab937652a82d365f0081dfec595e","sha1":"ad200cd06b661998965f61445954a4e2623902f4","sha256":"15fc3d651165f86b63629145b133172a62dcdcc137fdba5c866ed57a30be9705","sha512":"70a794a12f1c68afc6254076959dda1a14317f97045d139c837bff848cf2e7e9335169eab3fda3057ff10bb664743acdce9e750c4b987c78250c324901d00372","ssdeep":"","tlshash":"3631440875d6fdfa00e98186003f6703f1296d089921f159fff0e9c6ca1428b9135f3a","first_seen":"2025-08-21T14:51:48.27447Z","last_seen":"2026-08-07T21:57:50.521188Z","times_seen":931,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-4ad58d3c.f0a560cf.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-4ad58d3c.f0a560cf.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-18b8\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe7ac8e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":6328,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6160), with no line terminators","md5":"b504017f3c52cc4e2df62ed0b6f0377d","sha1":"77137076d48ba806de50cca24b0a2a94ac919535","sha256":"29f6ad0c03af4d0d4cce9b778c6b0265a0539bf287f80611b76ac68fb7fd8725","sha512":"72dda4dd41d89b3422a481acd664722a73b69067cdb7b88fb6c25ebe8cafdf5822624114923355c1f1aba8a53635340bc27742458733e50d309abec139b53e47","ssdeep":"96:6dBdYPbpnK+IyJAV9DACdB7B8HOb7K620BuKXW0xa5pjPaEfqsuVmr7mg9QVlm6a:soTlKSJAVR/r7uI7K6JgQCdcmr7mg9F","tlshash":"13d183cdb5eff8a40165ea7442bf2107f3596d6a2c585946e720c9d4bc2404e62f2f2e","first_seen":"2025-09-17T18:13:55.272521Z","last_seen":"2025-11-12T23:56:07.402473Z","times_seen":144,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176093259751.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176093259751.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 32620\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 20 Oct 2025 03:56:37 GMT\r\netag: \"68f5b2f5-7f6c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 810041\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=YNla54gqX65KZyScFz0seRME_KXjwI4wFl4bT7UJo3Y-1762729832.1928647-1.0.1.1-Ao0DPxXVYq6USqgv8gC8pHA5mKhbdnaN2lT1yQBr75I; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3eba569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"fad1c2c334562f0c6154d870063d25f0","sha1":"c028f8c001677aafc94f383f0c0378294784a486","sha256":"1da5f671d3bd8bda57694607fbc42e00ca7eaa7e46f28e05e4306543a5424e9c","sha512":"5ef6c012ed89a68a97e89370c1fb6db6e5e9b9e8fce4c8a4c9f64e63fa645aeb50c443ce189e9143b0eba3126e6add684250c92733d99b818e2e0332e29e9194","ssdeep":"768:AVMD11LZPgjd8CAGfGoZzKmjPmiCyzwWk63BooaatwW:ZDv68zNoFKmORW33qtVW","tlshash":"05e2f10a10f20576749eee0694e84fc6f5ccdd4895db20c2267bb79646c3ede88e27c6","first_seen":"2025-10-31T14:10:28.063289Z","last_seen":"2025-11-13T16:12:07.355017Z","times_seen":31,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176067207055.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176067207055.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 34748\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 17 Oct 2025 03:34:30 GMT\r\netag: \"68f1b946-87bc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 927409\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=7zcJt1dGg3BRdCEGucAa.Zzbz7cwBX4c_UudpZRxqgI-1762729832.1980176-1.0.1.1-D_pprh6vVzXfaYyfDJf.EZRdaRNXs_rI1rjv7OO_l4U; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3ec6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"a29f183156687076cb032f5e20b605d0","sha1":"67f23a2153b846536d37072a16633655aaf19d36","sha256":"e77e87b2c08b54f285a94080d9036f19c26154d0926ed1721026af362d4bd0a7","sha512":"9bbea7e6b06a099ec4caf2631bba8f8886b47db471793db44130e66ca9e9d0a3300072a2e2e34eead54dd3f705cd8c6272e684fd54005ca812552f0ddf07c6c0","ssdeep":"768:HCRiG0Rf+vfgmxFQyMAPzVEx6DgLkeF6BedK:apnH1PjMAE6DgM","tlshash":"4ff2023973ea6864a62ecd04183d327094eaec95b1d5b68f1c7d1b88bfc3139b05d1d6","first_seen":"2025-10-30T05:34:15.198022Z","last_seen":"2025-12-03T16:05:11.079541Z","times_seen":81,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mf2.agilenavi.com/r20.gif","fqdn":"mf2.agilenavi.com","domain":"agilenavi.com","tld":"com"},"ip":{"addr":"103.16.121.244","port":443,"asn":55303,"as":"EAGLE SKY CO LT","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agilenavi.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:C7:A3:FF:03:D2:4E:85:F5:7D:C3:89:6D:5F:F0:BF:34:8D:83:00","sha256":"D9:80:B9:31:B7:37:96:C8:F0:C0:E4:7B:2F:5F:4A:41:80:85:A0:51:29:ED:63:16:8B:E2:3D:BE:2E:36:4A:96"}}},"request":{"raw":"GET /r20.gif HTTP/1.1\r\nHost: mf2.agilenavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 200 OK\r\nContent-Type: image/gif\r\nServer: mf2.agilenavi.com\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nConnection: close\r\nContent-Length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-08-07T22:08:34.30485Z","times_seen":103263,"resource_available":true,"data":null}},"time_used":2646,"timings":{"blocked":1178,"dns":19,"connect":288,"send":0,"wait":289,"receive":0,"ssl":869},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"a8e5d5c627b4a2ae198bb3d3d70e517c","sha1":"0512ccd6844d36a6eab6a815c9ef09d9c0cce34f","sha256":"091c91b05e38b8605142af2293595be402346a01fb4ef2224d6285123037c827","sha512":"5f56cf0715b290306e1c420b5906cdb026294581d0fa06bebfb5d4ae887f580cd523b20e3bc3265002fbac94dec04eedd2ec50d77db7a538bf2d1bd30273decb","ssdeep":"","tlshash":"95b0121304c07453a0c72180277db2c535414ddd0109775045c00cd55682160b61c180","first_seen":"2025-11-09T23:11:08.926267Z","last_seen":"2026-06-21T05:12:09.684761Z","times_seen":3,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/ad_slogon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/ad_slogon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4965\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:53 GMT\r\netag: \"66c42ebd-1365\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe5fb82569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 57, 8-bit/color RGBA, non-interlaced","md5":"1051a4a67c8738af6a66b50c2d0b24d4","sha1":"48327f9abca87f6b3faaef6d9756b65a6e59eeba","sha256":"bbf8514a70868c3a222299dc450bde789f4964708b11808c0acd6fd122acf089","sha512":"100fc57d459fac33423a3d29c13c55546642ec9cb1604302c9f5f0a9b9b83953a2c42e3e870751d0225916e78b6ddc3811946d7f879903bc110b042e5b220202","ssdeep":"96:kQ4jecO8s3Tu1XyXxlbXdFFjMsmr5J5A0NB/7RmI:kJqis3T7h1tFCsmr5DNB/YI","tlshash":"2da17d46e8a5d52b232a20d0416b34dc89a44bfa93d3390ddf9a2fe5b2ce8460db5c16","first_seen":"2024-08-19T15:01:00.970319Z","last_seen":"2026-06-21T05:12:09.768841Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6b87d5c9.b48d1a60.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-6b87d5c9.b48d1a60.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 976413\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-7d0\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c85569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1996), with no line terminators","md5":"265dad71bc0d2f627e768d23515a2e4b","sha1":"1097ee9f481837c936d5e60e692eca43424b73d1","sha256":"7544fd60b737be0b9d1a450f4d426ee96a8a1ad4b49592303a3a923d8d6599be","sha512":"e212e2de43591027fbbfd2c36ae227f4be094dfbceaff007222028f5a6876bd1d6610e4e5e6b766bae10b9dd5f2c4b5c0978e064fa0d294bce8b682884b98566","ssdeep":"","tlshash":"da416588b0bbfde905e292a1003f6646f25534186c39f255ebb0ede09c2594f0124f2e","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.556453Z","times_seen":1147,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_container_top01.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_container_top01.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 10664\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-29a8\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d0d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 295 x 180, 8-bit/color RGBA, non-interlaced","md5":"b0711f2daf40fd90862dd130f42f8e9c","sha1":"8257b413949bfe73e502e0f587f4ab57a2421014","sha256":"c3a0ffed5dd41726b3cb5928c5507ad8b277644ab70c1b7ad84168125499c972","sha512":"07282c6a56eea63f05d41ec5bc61a2d4377df95e45373b006b8aa8b6a58f527841c4a894b1b3617e6bf0838c7f73cb4ed174012910e2a3aca67e4a20e5d11ba3","ssdeep":"192:wKeM1tcxs23raay2uCi689OJOOznP9J6WsszDavUsd0Ml/mZhFKJGffbfu:we1tOra72hXOU9QWsGDpsd0M4ZhFKJGK","tlshash":"2822b01d2c3caf3dc6a99a0286ee94664b31cd220dd9c5147efe61f2810cee485a9e34","first_seen":"2025-11-09T23:11:08.999997Z","last_seen":"2026-06-21T05:12:09.605797Z","times_seen":3,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/mobile_qr_login.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/mobile_qr_login.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 713\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-2c9\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d19569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 130, 8-bit/color RGBA, non-interlaced","md5":"155c7914fd10c00d330ef4d69d6ef542","sha1":"49e5d816c35f12812adb095456920b6dad548aac","sha256":"514375c9cb80abea195285275b4e569e525a9a49621c5625d90460a5c85782f2","sha512":"79c139f0e819b94af3112ba7ca0ff8c97a0732b28d4880212d5c4a2408a82f6bf89481f99792e7e376ea7e44bf0a601868b68b9098b57e9e1f03f51613109c40","ssdeep":"","tlshash":"bd01c0db118cf411cb36980f5f5864b3f09632ed02628759c70bc85a9bd6db7000ed27","first_seen":"2025-11-09T23:11:09.002708Z","last_seen":"2026-06-21T05:12:09.720205Z","times_seen":3,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/nav_over.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/nav_over.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 531\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-213\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbea1e16569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"9e38773970c2b493e32ea11ddcc0aebd","sha1":"c20c65f782e1c335e59b247497717bb63ca29180","sha256":"5c0137bee7bd06beb9d9309aacf9be349a425520fc7482ed176fe1ba12d11b7b","sha512":"a14e392e3e740090e6e73d022de96254f14b0f9b100564cbf42ffc01e20ce87c279d380ca1aef6ba8983bc20014ee0c559df565c78737773b70433f1805972ec","ssdeep":"","tlshash":"01f0e5ee63c015388d9bdd323531c0c29d22c8f5850f5b59b9c59c05ddcd4a81055a9b","first_seen":"2024-08-19T15:01:00.92941Z","last_seen":"2026-06-21T05:12:09.593034Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176040423751.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176040423751.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 30406\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 14 Oct 2025 01:10:37 GMT\r\netag: \"68eda30d-76c6\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 269064\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=ZnLnk0morq5KlpWNmsWIJNrsQao1JDG7_lDmqoLS5Ug-1762729832.1994727-1.0.1.1-1yCao1O.VrT7gFndVQ2Ib8z_5qfyo8h3tSU9WbsQisA; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3ecb569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":30406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"fff7c979f0b392e5de93882db8be6686","sha1":"f8618dc8b89d76476f03050bd8d9bc59c6c2aebd","sha256":"35488ca8ca23168ed978868fcc715cba0e5f702cba130b9995fb61f4af3169bf","sha512":"e5dcc26d29c4ae7999586b15946f8749c6f46e818be792ef959ab3a1bb112893b5e8c2da24d17528940dca0920f3426c96451476455fd246bacc22ea7e4dede3","ssdeep":"768:zkWSPTuPBu91Ek0j6O8QkpMYs0xxqU8HU+rYi2Ja:wWSPTawv0j6tVRs0xxqE90","tlshash":"57d2f1baa8f32ba019ac955d65b6c215e4c3a4187edac7943c3295ba0d3b094d8537f0","first_seen":"2025-10-25T06:14:50.587256Z","last_seen":"2025-11-28T05:47:48.48108Z","times_seen":82,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/api.php","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /web/api.php HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 156\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6288,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (6288), with no line terminators","md5":"db5c1cdc4c87d22b5458136c60f684ce","sha1":"3534b72d14b4dcb8960b8e0718363e13e3bbfb57","sha256":"ae8087508f5ab40546c4926afe7fbad79c7d89947f3a8a25d802f534974b8fe8","sha512":"680fe1aa01057482c31e215c21fe982bf98098d088542622b09e527e00d4e0d1585cf81e2c0e16cc3e5d615dc7e2d295e16fe6dc115a685fc61e5dc88e739eea","ssdeep":"192:+5yCVr71KVU3BOAXRdThL2+PS98I2WEDh5uDsjb:+5VVYUUAXRRhL2LwvTP","tlshash":"bcd17e4a38221398da15111c7e3eb35ce784124d796a59d0c3f5b913bef7b890b870d5","first_seen":"2025-11-09T23:11:09.006336Z","last_seen":"2026-06-21T05:12:09.759796Z","times_seen":3,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/btn_lang.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/btn_lang.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 315\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:50:53 GMT\r\netag: \"66c42ebd-13b\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe5fb84569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 26, 8-bit/color RGBA, non-interlaced","md5":"997f99f9baed4dc160d25c0cd715519f","sha1":"1caeab598eb20a02a6c691022d5865b1db110cb8","sha256":"144fc41b1334f4752a234e97d7784abf2d3099cf7023c2405d2819202fb6321d","sha512":"f775864636a033ea7941f6731d2940e34f3c4d4833fb2059b7e8aec1a3f2f3eefc00028b20def9a4f40e014f211d679d61c79d785d3dd61b89e774ce90be51d4","ssdeep":"","tlshash":"abe07de2a3408d9cab9fc5334b621100946b90e8530653144d08dc69244e5dc0064ab9","first_seen":"2025-11-09T23:11:09.008104Z","last_seen":"2026-06-21T05:12:09.740933Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-465278e6.8287745e.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-465278e6.8287745e.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 853822\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0c-5e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6cbff569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f10addde27cd463693b70887f7623864","sha1":"7c0f1dea503cc650dd30590d29a6b16926c7ab99","sha256":"f38394ba55d65bc861025783cf38d46bec3fd63127b1b820f81e4072df4b88bf","sha512":"3e583098f117fcedcd5d2163ff774553499fbad37380ebda18dcd4b9f4175233e624a422418f1b0634a2ffc7dec5f4b2a96bcfebfeef0b5a266bd5fba21d44ff","ssdeep":"","tlshash":"2eb01208501c31815376c15279d0cd8c0030a386d15a1048e19e4142106f2800895cc4","first_seen":"2024-06-10T08:09:49Z","last_seen":"2026-08-07T21:57:50.496907Z","times_seen":1164,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-81ecbb86.f395862e.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-81ecbb86.f395862e.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 368336\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-d5f\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6ec19569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3423,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3423), with no line terminators","md5":"78378590472c0d451e7e862404f377ad","sha1":"81ad577f74cb88f6728614f6750d8a4ac11c66e0","sha256":"d5edcd246966755e3a9876ddd4365f66de1ab0e17e47d011c1aa5474418da9c7","sha512":"21ea7f03c7a7248a45699e183bc8c56b62a7f72bda3feb053f67730509e7dbcdb8eb1670b8d57e15c08d940e4fb2e5ea9c3e64f2f6b6a25057817c894fc49bcd","ssdeep":"","tlshash":"376131997185343690ab838bb92b3f01b57711f87482b989b17cc9c4fd209476523afc","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.403982Z","times_seen":725,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_175989510985.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_175989510985.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 36222\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 08 Oct 2025 03:45:09 GMT\r\netag: \"68e5de45-8d7e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 827471\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=vDz.axhEAlBFKdOCNagCCx1SHiPif4ulgy0in.19E4o-1762729832.2008734-1.0.1.1-PnwWS7l09vKDps4gke94OmAh8fX7DFtl7rNdgA7FbgU; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb4ed0569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"79b22be5853e1f914e29b71ae79f3344","sha1":"b9b4e84167de59060875da64e18f4ec16061bffa","sha256":"b740a4f15d7186557734f94106c44e899cec4e7b35b0d4d5c8d72603746b5c3d","sha512":"f77d142617ef8bf102dcefa50566388174916131836f958a2178cb76d7a978bc95ef45d1fbc294f94340cbc134211d2cae99fe40e33beebac92f82b455b3bbb1","ssdeep":"768:RkYtofk5793m3HPqGlp4KoJ0ksaWkh4uNV8zuXXNFLe6zwgkoYUPekGm4:RL579W3HPCKo0NLyV9HfewPedm4","tlshash":"14f2f22b0527f9ad9b75113ab7c012cd4eb52112e9fd9d978e52bb04038732e3de5193","first_seen":"2025-10-22T21:14:36.909604Z","last_seen":"2025-11-24T13:01:19.822172Z","times_seen":79,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-0715e4e2.1ca846bb.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-0715e4e2.1ca846bb.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:55 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 846171\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0b-25\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5db69569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"febdd9ac8d6e1aa0d8ff1b47acefd601","sha1":"f2f65ca7cbf34eda02e3a193dbddad4ea3888f61","sha256":"17294be8ee5a6f2cd2bc7fb31515fe1a14b86419a46bbf783d5a294ebd954e5e","sha512":"a461f200deee17929eacb23f1fee2f36708791ec7b78802f6841f1d5356034eb450b6ae6cce7b9623e6081254d9aabe8b8970891d63d15266c33050d391216fa","ssdeep":"","tlshash":"b48004fc031534d4c474457d31550c1347007010040d430453c134001335440dd0c130","first_seen":"2024-06-10T08:09:48Z","last_seen":"2026-08-07T21:57:50.548023Z","times_seen":1161,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/element/language/lang_circle_b.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/element/language/lang_circle_b.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3253\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:44 GMT\r\netag: \"66c42f2c-cb5\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 205245\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe78c6e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 260, 8-bit/color RGBA, non-interlaced","md5":"32a2418bb0a9d48152edbb494037d4d0","sha1":"fc2880e8fa41b6cd3b6dc91eed2257eb0ca2c273","sha256":"b3047ea91541e75405468ad97ebd35543ab8afceb8f3e1e98366b288aba6633e","sha512":"d33ef215abbecb0864478dc62654cd6f0893a05daa91a0d75cc01a5e52343b425fb3fabd133ea0fdffd475ab66ebae4c24f2daad4f0f65427fd898bde6b8274c","ssdeep":"","tlshash":"26615cce10dfdddddc6b30b085b608ac1f0b4678b44d5780ebb2542f50aa88d75ab55e","first_seen":"2023-05-08T16:50:06Z","last_seen":"2026-08-05T23:37:41.211966Z","times_seen":152,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012641073.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012641073.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 302226\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:26:50 GMT\r\netag: \"625aee4a-49c92\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=IXhCRJ0EloeuoNS1gXWl9hfbA.IeSDVn0VzLTOeOpyc-1762729831.7090304-1.0.1.1-wT5vcDaVKEocWruMl.DQWUIma2vSu5LYEfEtDmNGx7E; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe82cd5569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":302226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"7227770d985e3ff71352a08d074d02ee","sha1":"ed72e5cb8c9402b3ab159830bdf73f88a1163c06","sha256":"238fa518bf4a2ec668cb264fdbc0cdcb4b2fee300b5f7d51d15c6560f84d7b0a","sha512":"22f1ce1f0a947ec09ae37ce7a41990c34a1f47023097116a7e8aadf2c573ceb26315d2fc0d7b03233f341e8cc68ef4d24ceb38643a8740e9bbe0f535a2cd0bf0","ssdeep":"6144:KYzx+YWfB9S7Mkzc59b4J8Y28/K7RrF3snAp6u:zl+TB9S7xc/Sti7RJ3g26u","tlshash":"6a5423e1805e0c3aefabfd75462162c58522e7be918b43e3a5bccc5e97024c5cd4896d","first_seen":"2025-11-09T23:11:09.013804Z","last_seen":"2026-06-21T05:12:09.74341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_star_img01.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_star_img01.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1828\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-724\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d1e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 32, 8-bit/color RGBA, non-interlaced","md5":"36e33caf1809a204a59b03e62b5d9b32","sha1":"1cae39ac03c985599b9b073b13c1017a1d0ebf54","sha256":"637fe951a0d20a47389bc0939cca5f9a7279a7a3751c44bd62fd7040a97a29b6","sha512":"f1bfdfb350fa96b77dc6723f9e81428d98fefdceebc3b73ace73a5c4b4a61beb4502eb79e76290fa4b91c4c145fc6a28e7e1f8b25de22f192f7c65201a99ca0d","ssdeep":"","tlshash":"2c31e97cb3913da1e2a6f14364f1d0676f2a51c5eaf3502668ced53a24307f014294df","first_seen":"2024-08-19T15:01:00.938943Z","last_seen":"2026-06-22T01:20:31.788617Z","times_seen":9,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/game_live_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/game_live_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2191\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-88f\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe89d24569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 57, 8-bit/color RGBA, non-interlaced","md5":"151a86bb63425f9dc84673a77f9f08bb","sha1":"eacc66d886260febf0d07b3a1c8a10aa41b2d01e","sha256":"e4dac2e252b0d9451e5ef9b79927a382cc514a12eb2268c77d8a1ced9d9f8ae3","sha512":"da5b46c85187774eb2f4e8d4ee10c27c76bc0ae2404c620b6c5fbce836b5682249e3fc1051aa13a873362a11b8544ca35175787396e61a60c4a14d3c2397dca7","ssdeep":"","tlshash":"42413cc2b3fc541a4d84dc3e98460152b9f9c644c466dfc8f928ae0d27701dd4b223c3","first_seen":"2024-08-19T15:01:00.939634Z","last_seen":"2026-06-21T05:12:09.648667Z","times_seen":6,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_joinus.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_joinus.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2046\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-7fe\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbea1e15569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 70, 8-bit/color RGBA, non-interlaced","md5":"4fc56a820be54e200a77ef6e21f8c250","sha1":"134bab4900409e078df289e00fb7598bc8b46424","sha256":"a8daf141658896c9cdb8f05808365025bfab86a39d719e3f799bb3463989de96","sha512":"b282f27d774326c19b26eb21569e1c2868d145c784e77d7ea28e77fdf194fe49aa50349113808ad9fd0b75dc12af23d3f95ad6fd5d1963084ddfb607ec6c8733","ssdeep":"","tlshash":"ae412c5333fdec8fa91978eb83775a24580e915b592307508d2d826db4884a52530432","first_seen":"2025-11-09T23:11:09.01763Z","last_seen":"2026-06-21T05:12:09.692197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-common.4b9fb222.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-common.4b9fb222.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1014302\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\netag: W/\"69018bd2-11150\"\r\ncontent-encoding: gzip\r\nset-cookie: _cfuvid=xEZ5Ly1XCYTNWSsa3bX5LE.h12bMs6Po9ISjA0VLWo4-1762729827.192179-1.0.1.1-xZfijYdTVPz0VXw2VY0TJAk965FuPKaEAccZipLQKX4; HttpOnly; SameSite=None; Secure; Path=/; Domain=g4.cldfvn.com\r\ncf-ray: 99c0fbcbfd3d3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69968,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65404), with no line terminators","md5":"63f7ba2c1018175c4cde2c45a44d2bbf","sha1":"70f4c7b9ee339773e0419e6dea9072fead6d33ac","sha256":"ca66bbda15520eba487d620863023de2f0c2007b0e91218ad5afad11b7675c1e","sha512":"f1dd1dc580405a9b624883934f074460ba80d9b5eab1d1b59a95ec67b3575840fc37e709d301ec0c1e7bf53f83eee660aae07e5747324ff682c9928b94b04719","ssdeep":"768:OAzJ7vb7aEFcD42PyQFlmy/uLUL1fG/SQPDkDl+jTYDrMweizaZoap7k:x5/a0y4T+/ugL1f4SlQ2MwTOZnI","tlshash":"2563989cf1c6f8a606ab3435563fb20eb5b739857456c1828b61e9c1bc387c96023f1e","first_seen":"2025-10-15T04:32:36.326914Z","last_seen":"2025-11-12T23:56:07.516757Z","times_seen":79,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":35,"dns":5,"connect":4,"send":0,"wait":16,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3796fae5.dbd6a915.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-3796fae5.dbd6a915.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-203e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe29958569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8254,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8235), with no line terminators","md5":"65029f6df9da220449a01d92ee7d806f","sha1":"6a6f05e1769c250153ae5299a1fcfebe882a30eb","sha256":"6c7eec28657443b45ce7c919af59ea26d89105dfdd4fbc0937486771ccb4f844","sha512":"8b8a962660e3c26c55b1e16e93c86a05cbae066335ff706b89ef9461a3f1d995f83eb98a4674a4160a174232940af17e34d433a6cf308a0d24a3f785babb74e9","ssdeep":"96:GIgm9r0GSVWN/tzf34/Qzyv5Q4n4M+7pZmuP+v45shDr1+4Na+L3mbK0wl5YmJdG:GIOib+5Q/rPK22l/NplrUg4","tlshash":"f502b42cfa936f6985ab410d24dea5e470a359c82393c009767f86f5dbe2d29310177f","first_seen":"2025-10-15T04:32:35.435027Z","last_seen":"2025-11-12T23:56:07.389817Z","times_seen":79,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-2e292fd8.31478f58.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-2e292fd8.31478f58.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 03:02:29 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 446237\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"68b7afc5-cd\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe57b07569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"932e8b72f231179bfc43278292800971","sha1":"a61a3dad240b0f6b0362fbdee302571eaedfe253","sha256":"fa129a75acf7ee7796b89412fd4f5b878460006ea47cc59f7acb683cbe50e821","sha512":"7981ac7e2d73a2a63db31806fe6c7c374bacc22bc84053226f7b753cbe27542810a4b06f53283aa737b3d56f9a73fcf7aff0170d75e7274bfc2e62d8b3da8a54","ssdeep":"","tlshash":"f2d0a741993a4222407d5d264f8e7347c423cd29424991cbfb01c3101c8d00c0433d3e","first_seen":"2024-06-10T08:09:50Z","last_seen":"2026-08-07T21:57:50.486656Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/news_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/news_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 920\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-398\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe5fb88569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 42, 8-bit/color RGBA, non-interlaced","md5":"4ca161add1c1e10221e27386f4fc0a22","sha1":"64d6a7a1ecfa9a016b4c6652630309a655626639","sha256":"6847a166fe826c7e1ac39cede78c63e5ddd46314ada6199c45a857c7db72808f","sha512":"8ec1f44eb41714d3a000a8b54103b40fa0e162d632706570ee5e55d8050d811209efaa5c8e3f39667c713289ba7bc1b5e4bbc2ec9b5a49c1d51bf0e99bf773d6","ssdeep":"","tlshash":"b411b7d391a005b48279e004f4611856a02e069aeb98c25eb50e3059e18bfe88ee36f3","first_seen":"2024-09-19T23:01:30.326693Z","last_seen":"2026-06-22T01:20:31.663247Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img16.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img16.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3591\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-e07\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe64bb4569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 86, 8-bit/color RGBA, non-interlaced","md5":"ffd3006ba9443bf1e316392faa0dd3cd","sha1":"49fb9c59371402d1478bd056823223b5e60606c7","sha256":"51498d13d059a64381533a8e78824c8b914e32e2f4b32ea29a043733ee63e0c0","sha512":"51eb0f37365c108d08087153642ed6214f9abac5eac0351ea8dbc5d7d00320cc100ebe8745692647ef00826170075616dfa7510c139fa97c0a3f5b13267f463d","ssdeep":"","tlshash":"d2715ce3b039297c1669cc75496da4ec3f5688cef46c2c186b7ba6c444055d462f8857","first_seen":"2024-08-19T15:01:00.962423Z","last_seen":"2026-06-21T05:12:09.795287Z","times_seen":6,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img17.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img17.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3277\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-ccd\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe64bb6569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 86, 8-bit/color RGBA, non-interlaced","md5":"3e7d74c889f2ae7e8974929774d36611","sha1":"a2615c2eb7082939c0ec345ce0dbb805259b3b0e","sha256":"ce5a7f33add7f951b300e5987c98e8ff937c63cc9d1e7ac5668af3c5107fbc9d","sha512":"4271e934b5a50952ccbcbd4c764167231783bf5a11b01b2daf6e94366ef2895c4f68ad72cff1e6c5d2f9f7f2cbeb41e8cdc1f6d9ef07e9569bff7ef5859cf19a","ssdeep":"","tlshash":"c3615cdb5b4c92f3a9ede0307dac3555bba1b4b5ac0481165b078fb11d0416c11e703b","first_seen":"2024-08-19T15:01:00.964309Z","last_seen":"2026-06-21T05:12:09.577072Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-5747b262.51af1b51.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-5747b262.51af1b51.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 262467\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0c-21e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c79569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (542), with no line terminators","md5":"f064d93b05e0c55d793109f03e8b14d2","sha1":"e103b031c0e0437b9794030086af47ca253e17b5","sha256":"b819cd24af70462d0f4a4fc716bc97defb05e5c80eb3b53b33e1288d8999b130","sha512":"c04474c35734338f81a5503ca52f0dd3e4703f66fd4b936501efaa6d443c4a4f5683403015beb1bc49e7772e8cb92cef031810ac666c96fdc0bfaba2277c0662","ssdeep":"","tlshash":"cff08b28428698435493c70f71e0d70c082dc33da9328f2df4ab2410ca9ebbe00225ef","first_seen":"2024-06-10T08:09:49Z","last_seen":"2026-08-07T21:57:50.526081Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3690af37.5e9e4296.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-3690af37.5e9e4296.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 09 Apr 2025 08:06:12 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 562751\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"67f62a74-3b0e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcdbabd569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15118,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15118), with no line terminators","md5":"9b714308d7254328c364b062f4b83328","sha1":"aeb6afad56be5f0275396cf85b02de0d0e0487c6","sha256":"445184f0141ec123fc370a27678fb6f8442b41c694fdbb9d3d050aa65e1c487c","sha512":"bbd3bd69efb75baf6de3afe4374b5bc83a997c05ab386145d8867f0603ea2a68139247b34a1c3dfac03629da5f6da438db86b92185cb106e4cf29875cf50dcef","ssdeep":"192:M0lu3u9RmTAawE5zY9F81VNbn/5ZZnVMm4PuGxjLSpqyEwtKV/qR44RZ6fQjZ:Nu3u94gEFY9i1V9BnVMLBL+EhhyxjVjZ","tlshash":"3e62b6cdf3d6b06403d7bab0a12f200be2776559b84e8455e224e5d1bc7a54e6227f3c","first_seen":"2025-04-10T03:02:10.994637Z","last_seen":"2026-08-07T21:57:50.549686Z","times_seen":1089,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-vendors.8331f8b2.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-vendors.8331f8b2.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:58 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1957051\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\netag: W/\"66c42e0e-48ed\"\r\ncontent-encoding: gzip\r\nset-cookie: _cfuvid=vy.UlGhjyzATpeLQAU3jeRxYLjQDWwr9R4IG47o5Osw-1762729827.1914954-1.0.1.1-qk7FiQFd4lS303HopNtJamUeakWkYgJOF.0P6b9zTis; HttpOnly; SameSite=None; Secure; Path=/; Domain=g4.cldfvn.com\r\ncf-ray: 99c0fbcbfd3c3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":18669,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18669), with no line terminators","md5":"349c6cf53c85276d857ad072ee419b11","sha1":"632dbef2e088dde56a0ff87cad4e1bdf763a3f8f","sha256":"791d7e3450c9ba4213302277d3e54894b95aac1db580341dda9dbc4d28b8b0ba","sha512":"1e893ad8365314bfc9725979884d569707fb5869c5f78adceec23e13ea0dc43f3bf82351add961088d3c6fbb1fb573ad04fa0c62b0a09a895c4f02cf748b367d","ssdeep":"192:VUgNf/pRaNaC0zDwO3cmI53YJnoiPV5kJN/:VUg1/pRTCsUO3cmICxfPkJN/","tlshash":"4f8263291b013027b2374f5e87e9da788738ca93865309ef7350ee05c3f6579225e766","first_seen":"2024-12-02T05:42:42.037909Z","last_seen":"2026-08-07T21:57:50.419145Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":36,"dns":8,"connect":4,"send":0,"wait":11,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0e200e.d16bb4d3.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d0e200e.d16bb4d3.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1014301\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-5ce\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcdcac7569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1486), with no line terminators","md5":"c75f2d0b1e1374dd0022a7ca2142147a","sha1":"dc17a5da381bc348a631e76031519556b8c0015f","sha256":"50b4a69a159737fbe0c31bebe1c920e420a93a3ff976910041ab07e5c5a05f50","sha512":"fac5b0e4188f753e3e0ae28e18cd3f21a8be49e6ee083aba2041d53776a2bf913f0adbf8a3cc066466a28173f766ccf63460ee563102b0dda65c754b9f3c5dbf","ssdeep":"","tlshash":"f131104e79eaedf504f462d312bfa303f12525266832f18167f0dad0a8149878172e9a","first_seen":"2024-09-23T15:27:31Z","last_seen":"2026-08-07T21:57:50.546024Z","times_seen":1030,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-6a2a33e4.dba2aea9.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-6a2a33e4.dba2aea9.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2163623\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e0d-417\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe7ccab569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1047), with no line terminators","md5":"d02452322133cd84818961fbe7c65ee4","sha1":"a8ca3f3978226e1b9d75bb8d5b349ae81fdcbe0e","sha256":"7e74d34a0c97974804cca3b30891fc378b3bdb0c7f0cf49b50e88f3a9f51380e","sha512":"2c6171321256f1703bd24e3a54fbfc366c902e8f764a24de24d20e379202eced5793276794d9b48ad7340ed5f046753a6359ce90c073f1b836f520cd57610c99","ssdeep":"","tlshash":"20115b859653b49ed5ff012f85c628d76b54c823f82eab5fbb71e200dbe08586385650","first_seen":"2024-06-10T08:09:51Z","last_seen":"2026-08-07T21:57:50.488098Z","times_seen":972,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012636184.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012636184.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 321378\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:26:01 GMT\r\netag: \"625aee19-4e762\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=fJ4nOAnunZP2gdN0puN8QyaOnD3J7D8jb98tOlGxxCI-1762729831.7011032-1.0.1.1-ZHc0vAqwUwgnTOqvaSRCeTGUUoBjRWHTsaSsMxF48pM; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe82cd1569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"df54e1da3ed7016619d82ad29089592c","sha1":"9283f76039b72a8331806c356f2709995ba7fe71","sha256":"2d84e929b3e68718acaf236d4a7950017e73c7dc3321e678639c88fe11e50db1","sha512":"888dcb83611d22f6902d6b2c8e213f4136e326eb897ca69246924f603b80a5823d1f15accee42f463202dcbd5395d94aa6e446ed4168608d11600188d17c2006","ssdeep":"6144:dlbjo368IMKastk89z60TDfi678puomFR8TRiw4OuNb8ZaU0C1e:dprnMKTbVZTD2s8Tkw4Ou18j0Cs","tlshash":"a864230162426a53801baf60631851990b126dfd4de37f73e89f2bde7ce06be4b60bd5","first_seen":"2025-11-09T23:11:09.026076Z","last_seen":"2026-06-21T05:12:09.668702Z","times_seen":3,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012624191.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012624191.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 317464\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:24:01 GMT\r\netag: \"625aeda1-4d818\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=K0cf56X8mPncpEXHascBRR76qHNNZsw0ozewu5bsS_I-1762729831.7211936-1.0.1.1-ECMlxIQaSvHYZEJEywGGpNyJcZ1OkN0DS11O9vsAqKI; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83ce5569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"0518a0eb7246a335dc30c5c9ebf6fc55","sha1":"0fe0ccfa0d37a553e2424db5a5a907557c528c9e","sha256":"30a8867734a5265d3afdab207614b6a0fef84f99858d541d4e63d44e0eaecc82","sha512":"810301d810477577be2f3043851e914208a06ec4ddba4ff561dd3f853ecf5b7f6c5d873a354989ddeb80b8b743c049ecd5cf83e79cad6da0717bfb267f4d6d3d","ssdeep":"6144:/+hVIoShf9aGtWyNxWdvE9NSbjtm7y8mKA7LAyB/2cd4laBmen5Mm3VrOOxPsxyi:WhSN5WwAvkQtU41J2paQe5MEpOOxP4","tlshash":"2a6423768719284c51980fdb70fbbe0d2ae81c8829c6267774c578dc7ec35e112b9adb","first_seen":"2025-11-09T23:11:09.027687Z","last_seen":"2026-06-21T05:12:09.661712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/mobile_img.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/mobile_img.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 255951\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-3e7cf\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d12569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 630 x 441, 8-bit/color RGBA, non-interlaced","md5":"649188a845de2364d53af2cdda10189f","sha1":"2a7e5370a8382d5a8527e92b534c9b3d457a0c60","sha256":"f73fab743a16052eb6f30005554ee0cee373877728c11204f7ed75c13c01f7a3","sha512":"de399c8ff19816a1fe5b3745394b88a84b6fe3f6c81125bf5783e5da230c0cb0e8e506a6000febb5c8abf694c3690da6a65c0ddf6f4782ae89357ed25b6e89f7","ssdeep":"6144:e8vibt6zs6y4Tk7ie2kVknMKqZEivd/2pg7ewuAGC:XviwzsrwkGfaKiV2pgSdC","tlshash":"6f4423ee5455b23fb9891205ac33df29c1d375318f678725e928b249aa0a31341adf3b","first_seen":"2025-11-09T23:11:09.029593Z","last_seen":"2026-06-21T05:12:09.800796Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/btn_login.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/btn_login.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1722\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-6ba\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe9fe02569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 70, 8-bit/color RGBA, non-interlaced","md5":"638f1cb132922c2e1f2b7e7b0c2b2f00","sha1":"cb1f7e25ca79d41141434c786e78667b5311f7ba","sha256":"9e43e2eb9d9e6fef9848443ee31e73853f5829858365384224ff6ea0578b6421","sha512":"28692b7dce674dda8e7c46772c6e0d34296adaf0c6032de92b30817cff6af17337ca137dcb7775e4dec42969c1c4eb59fe4112c7958c87a85eada8ba7d6964c5","ssdeep":"","tlshash":"1b31f8cab385dfb94feb0c265e7046534a2d5b36c110c3998c1480e5f8459d3237f839","first_seen":"2025-11-09T23:11:09.031339Z","last_seen":"2026-06-21T05:12:09.718082Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-3796fae5.7302a3fe.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-3796fae5.7302a3fe.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000\r\nage: 1735722\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e0c-11f4\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe29955569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4596), with no line terminators","md5":"290e17e1d58b0379d16d257685100877","sha1":"55fb116a6121f0883d9417992025723660a15c71","sha256":"8ef6b591bdaf33817f0c0879de22f73b5a5e1004dc16b7d657e37dc138ff16e9","sha512":"af2c19faefd1b303fd717d56e8d2841b4413e73e7684d37611ca3653e4796eedc598c50cc656a49841e412bdf245138e35d81ffcd072223aef5826fe80f51912","ssdeep":"48:KoON7oN27/doRia/AV82GL7FnzwFnDrVVSVIo:C7o07lMiKFncFnD3S7","tlshash":"3091653ef9cb4f27663fc11ba4d0b3dc9526925ed1f3016ee6039404898f587660267b","first_seen":"2024-09-19T23:01:30.227504Z","last_seen":"2026-08-07T21:57:50.443943Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mf1.agilenavi.com/r20.gif","fqdn":"mf1.agilenavi.com","domain":"agilenavi.com","tld":"com"},"ip":{"addr":"103.18.175.244","port":443,"asn":55303,"as":"EAGLE SKY CO LT","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agilenavi.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:C7:A3:FF:03:D2:4E:85:F5:7D:C3:89:6D:5F:F0:BF:34:8D:83:00","sha256":"D9:80:B9:31:B7:37:96:C8:F0:C0:E4:7B:2F:5F:4A:41:80:85:A0:51:29:ED:63:16:8B:E2:3D:BE:2E:36:4A:96"}}},"request":{"raw":"GET /r20.gif HTTP/1.1\r\nHost: mf1.agilenavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 200 OK\r\nContent-Type: image/gif\r\nAccess-Control-Allow-Origin: *\r\nTiming-Allow-Origin: *\r\nServer: mf1.agilenavi.com, BigIP\r\nConnection: close\r\nContent-Length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-08-07T22:08:34.30485Z","times_seen":103263,"resource_available":true,"data":null}},"time_used":2332,"timings":{"blocked":1026,"dns":21,"connect":279,"send":0,"wait":279,"receive":0,"ssl":724},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img12.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img12.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3148\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-c4c\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe63ba5569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 72, 8-bit/color RGBA, non-interlaced","md5":"7888a0330b58e8347ba0bcc2122139a7","sha1":"5f0ef7e6ebda7184f6d66a7fe59fd9987246a047","sha256":"a2adb9e87a24f2cea6e8153d130a6020b227efd4fa5872ad92aa2b6b366023c9","sha512":"78a0f3972fec83e2554d757a3255c0e085d82c6797df24db49a18199b85ccd3a6aef50291a118ff937c41e129653ef6c8c7a6462d2cc71c9dd23f4a45a9ae1c9","ssdeep":"","tlshash":"6c517decaa3488ee4c2c6c7c117436915e6fd6e130b402c7ee46e0e82b8e17641a14a7","first_seen":"2024-08-19T15:01:00.930594Z","last_seen":"2026-06-21T05:12:09.809458Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/api.php","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /web/api.php HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 156\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14424,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (14424), with no line terminators","md5":"eb24d3e16408f7f107d521afc0b668ff","sha1":"a67e20cd31f14c6164eee8f29214965aae5379fc","sha256":"28cca9e52be1de35899797245ed2a2e6bafcca82c1894e9d0a021b5810bbd929","sha512":"5d8dd4f9a0145ebfb427e269364dd2c7584193b981e0886f63c341d893b9e67e2c6bfcef79b8b0bade238548d5ce2b0bf9b5e77e8d39d2fabb23e4a8839a3012","ssdeep":"384:BcTEQaDzWUWSnhmV6ZUqX8pQjVHUIm4r8:BlLDbpEqX8OjVHKE8","tlshash":"af52ae3272a13f2fd68cd45920fe6164a655ef5bc0e819e701273d28aeee84e3b45312","first_seen":"2025-11-09T23:11:09.03493Z","last_seen":"2025-11-26T04:35:53.875423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3606dh.com/tu/tj.gif","fqdn":"3606dh.com","domain":"3606dh.com","tld":"com"},"ip":{"addr":"103.125.85.204","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"3606.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 02 Oct 2025 00:00:00 GMT","end":"Fri, 02 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7F:90:E6:E2:68:75:94:41:DB:D5:F0:B3:2B:8E:84:FF:50:B3:61:49","sha256":"2E:D4:A9:0F:13:E2:55:7A:6F:A1:5F:BA:FF:9E:0B:DB:B2:76:9E:30:1D:F3:F8:2D:8E:83:A6:B1:1C:86:8F:05"}}},"request":{"raw":"GET /tu/tj.gif HTTP/1.1\r\nHost: 3606dh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Thu, 10 Sep 2020 12:38:18 GMT\r\naccept-ranges: bytes\r\netag: \"09973426f87d61:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-length: 215\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":215,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 23 x 14","md5":"d629646910261c18fc8eb25bb6d43449","sha1":"ca94e39f004ee2220f94000150bed5ff769f33e0","sha256":"2ec9e2e0a5678a9803fcb113f86d8ec37876884274f82faec605fad33555d91d","sha512":"0ad34128a166f47a297d021c63e0bd5756e713befd393d1e87a1a60e9d47e72312ce6c87d009a3eb42aa861108f7f1b4ed287de6c418d3db0415b4471970da71","ssdeep":"","tlshash":"a0d0a793516d14b0d465357574e40d0e3001ba704e19023d78105449200e477d7c27c2","first_seen":"2023-05-15T05:22:54Z","last_seen":"2026-07-18T11:56:42.145181Z","times_seen":94,"resource_available":false,"data":null}},"time_used":1796,"timings":{"blocked":765,"dns":8,"connect":254,"send":0,"wait":254,"receive":0,"ssl":513},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-4a97e788.5097f260.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-4a97e788.5097f260.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:56 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 1362071\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e0c-26bb\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5cb5c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":9915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9915), with no line terminators","md5":"8861bcafbba2d5e292064dcbc54cd3e2","sha1":"316e60a913e6cc31d95636617f5c572cb396bb0c","sha256":"9efee2cb62a66a48f31d4301ddbf52692abf6fde39116967494d72727e8f7da3","sha512":"7b70557146afbc1912e269403def68aaa7d391c081c2235bb2b45cdfe504f9d2566c1dce45b449ba2c6bf35651fa7fcda5a9c51d67aed705d8597880a63083fb","ssdeep":"192:iLfNv4LQDmGV1JO4LQDEiZbn4LQDqnMuo54LQDbnICaK8LJKy:u9fDmaGfD5VnfDqMz5fDbu9/","tlshash":"aa123b3e7767764d4093c439f6f4ba3b1c24ce4e5e230f9df1d22b69140e2981526ae6","first_seen":"2024-06-10T08:09:49Z","last_seen":"2026-08-07T21:57:50.544102Z","times_seen":1028,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-5747b262.d02962ab.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-5747b262.d02962ab.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-e8e\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c7f569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3638), with no line terminators","md5":"50125e0514a85442eed0737ea53a6ac5","sha1":"dda6a2ef4c9049a1cd35b91e70212b169d17d39c","sha256":"3e5cd9c881a8ce15b954f23bcbe39cf5c9b22b8eb1bd8a91a69cc7535d8f7251","sha512":"9b369239168fa6f9aee5b99d98c3da2fce7a173e1f7d8ed437b4747ee01f20c6a64b65344150e3d3602ace7f11a68ad06fa3317c2aa0cbb74f340d0600f9827a","ssdeep":"","tlshash":"ce71d818b04dfceb0ed25153346a530662a9221c6a6deca4fcf1e7d04f54a866232f7f","first_seen":"2024-06-10T08:09:48Z","last_seen":"2025-11-24T13:01:19.811906Z","times_seen":396,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012589299.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012589299.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 324554\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"625aec44-4f3ca\"\r\nlast-modified: Sat, 16 Apr 2022 16:18:12 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nset-cookie: _cfuvid=A43cg3H1s.E0zbqg28LdHgreEUPkpubUfTaVPdF_10Y-1762729831.7146816-1.0.1.1-lYGxSyaVNGFnHB4m0WHqKaY6xFPpyydZAvKhDZhOio4; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83cdc569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"3d36e85c369d9a0308205506bc6a21cc","sha1":"ceb7ce02f8021ccf842dc1ca78918c47aafcdbf7","sha256":"16c24d15e984d3c5043541526e1ccec5cda10e870fb398620559dd3c3a13731e","sha512":"aec9e0467e8b24d464a4380cc3fb2777d9c18b2b1beab1e2c4077fe41c7e1f00baf7225e9fe5b7a40d2055a3c8b1441104eabf60293c3cc22c6eb1dc5ffba1fb","ssdeep":"6144:25rhkqEA8bT6bZjjrAvhuUKm8su9ra63j82rMmU9oUQI+Zyv4L4:CiqEz69bous83Zr3j82YmU9oU6yv+4","tlshash":"fd64234a9d6a3da3d5df02e93789e33282157c50318770c8739c162e69cf36ad399af4","first_seen":"2025-11-09T23:11:09.039522Z","last_seen":"2026-06-21T05:12:09.670132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012620668.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012620668.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 567903\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:23:26 GMT\r\netag: \"625aed7e-8aa5f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=sOE6jqkNMii6mh5kz2hTnX7vWLt.oLPAaijg8aC21O8-1762729831.7205672-1.0.1.1-gXUhjheiuFOiYwQ8oE2YRBPLHDIVT.qxCSY10XFceDg; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe83ce3569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567903,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, density 10752x2048, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1920x500, components 3","md5":"10cf45d7b6eaf8675b1e7f38596e8222","sha1":"d9ff06b60ce0f6d839c16c40f41b9aa023eee0c1","sha256":"903c9b4bbb1ae36dfa2b9b5ac2e6db4565aa87049c72dff294d23cddbf237e80","sha512":"218f7ab60e616c713d2c25ac5344034121905ddba251b73a14e11d2b419be5aba41d281ed614cb8b3f75c659b0190c92bf8fb129309f2d839ff6e6126658b39e","ssdeep":"12288:GgqJSJa1VDRPkI4LOcWheOOwWaVmcgWihSRSTvNHG3bmp/yBAv:GR1VDR9aODhRxWigWzSTvNHGLEYW","tlshash":"18c42313ba59a421ee0c8255e3e68e2e01e8d7fc0b36857644205d98f72b750bf4f6ed","first_seen":"2025-11-09T23:11:09.041693Z","last_seen":"2026-06-21T05:12:09.632612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1677312/images/162796269889.gif","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1677312/images/162796269889.gif HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1287\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 03 Aug 2021 03:51:38 GMT\r\netag: \"6108bd4a-507\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=0KkLbliiuQ898kms6iTNppeYbBT6v5G3RQ6L34uaRiI-1762729832.0150764-1.0.1.1-Pc93cginHqOtW2n8ORmZ.PwJI6f6CxZE9FIxPFAmQ0o; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbea1e10569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1287,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 14","md5":"bbd7ac72adb3b38e3ca266d6fe4f0444","sha1":"7cb51ce64d1d554a7bf4ebe08c28f31079bc42ae","sha256":"569067bea6a2f3c2474ba52431f63d68459c5fdf332d2944d1214746a5cc312d","sha512":"4e29f110ea285f6667472d713859a419294faafbd1084125f73a6cf43268683e250131c2104c04fdfa4f561fa8417c69164cea29b91883df0d6719e3c787e7d5","ssdeep":"","tlshash":"fb21981edcea6c00758c5af69df7396b1b011cc14ce8e41978ccd81b161e0b58527adb","first_seen":"2024-08-19T15:01:00.971001Z","last_seen":"2026-06-21T05:12:09.629611Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-21aae442.b344b50a.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-21aae442.b344b50a.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1014301\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-b0d2\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcdbac5569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45152), with no line terminators","md5":"10f10f36a61c42537b730c5983bea352","sha1":"de316c07a9503d2a2e617e2372b0fa8b86f8089d","sha256":"eef0ddcf17835b58116907cf71d4b724b99f9ad30a31e8347f65662568655fa4","sha512":"ee84c33342155749c9ff687e599e5e260d85c2cf0848a94a2c44443fa13c2010a50a1ced477ad232d9c602dddab276594fade885111aed3a2f834b41339f4cee","ssdeep":"768:g5Cn484GbMTDGHgd09zhCpJVkndfbuj+GvgcYm56A:grj9TDGHRhkJVkndTuSGvgcYe6A","tlshash":"5813a8a9b592fca905f221d2233ff702f12b19966476d000d770dec1bd3498f9226f6a","first_seen":"2025-10-29T05:48:39.589653Z","last_seen":"2025-11-12T23:56:07.350016Z","times_seen":36,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:28.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:28 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121660,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"abdded4a0b7a7844bccd3085983b24a2","sha1":"29ee80b6617c775e566ed4cbed53cdfabef7cabf","sha256":"b1d999bfb680c7378536ddf6d6c835598292d066281a6c8c88e557d852364473","sha512":"986281fc2915685aa740e0252ab5c24a0c25dfba1041918343cf8e300d1b490dd2bd91a6e05590c460bc32aee3e2733d7a0b95d2e459f0aa2b24683aa9f37bf6","ssdeep":"3072:cyYMsJbd8A+8TYmOn2uQ6RZ14DqmiEvleJRKVtSCPEaHz:ctld8qT9q2uQO34D73MQP8aHz","tlshash":"a2c301619dc8afe2cffc660480bb170e67b45e8aa875798ad733bc832a77040454b5c6","first_seen":"2025-11-09T23:11:09.047205Z","last_seen":"2025-11-09T23:11:09.047205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d216428.ccd5c78d.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d216428.ccd5c78d.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:48:03 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1747031\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e13-164\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbddfe75569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356), with no line terminators","md5":"b31b5e049848b47b4cfc890dc2eaa18f","sha1":"1927e116754dbe44edd16ff5434303cc7f6b1eb6","sha256":"05dd4b865ef9a9905ae7b634bcbd73cc7bf39ed2dceb1dfd349a2eebb54904d4","sha512":"5924df01ca0639f69127a708c836ff7fa990e07301a8c80239e48633a968b3fb103fdb11e98dfe6348c26032d4b4214bcfbf6ba0107f9ea24854e63bbe2f86fb","ssdeep":"","tlshash":"f1e0686cb095e44919b3e8e1621b53e855678b16266a21954ae090c47d1828f5022aab","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T21:57:50.451419Z","times_seen":1203,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-8761cd82.c312a1cc.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-8761cd82.c312a1cc.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 1820527\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0d-49\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5cb58569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f77732d6217ae5e520075acda2644c15","sha1":"d1022726f58e1fc65c00bea296cc47c2cc4d6a52","sha256":"0d3e4bde30694eb3269684aa411e3e46c02862fb86164f5d7c7b5902149aea9f","sha512":"eda95cfc0e0189b4e99098a52479db1dd62c62e00cf5919cc73ab713bb7808aafd3b53a53db4b07392f49a182b0b086e051d83d4ae976bb70d77e2391ed0cf9f","ssdeep":"","tlshash":"a4a011000a203ea08832a0aaaaa0800820b0cc08abb2020a00020280c28b808e0e83bc","first_seen":"2024-06-10T08:09:51Z","last_seen":"2026-08-07T21:57:50.547022Z","times_seen":1029,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img07.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img07.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3754\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-eaa\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62b9c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 72, 8-bit/color RGBA, non-interlaced","md5":"7f8275cb199854632040cafc3a47ac69","sha1":"fe5255d3023e73cdb2080a89d5b9512107c1a0b8","sha256":"cea750f74d3408e414ac5d74d9f9302ee7537d715e72610c8db419dec63608c2","sha512":"436160e3f8f1ae39cc9fa02241e0bb871667d6cd7b344e3462ac696a7fc503bcf68828343205dbc2cecf3a6eac5fdeb7420ffceafec0bf2a3dc58358884cc544","ssdeep":"","tlshash":"9c716dc608441a5adca4cdb236476ad77587069199222134723da9fb60c58fe4b09bb7","first_seen":"2024-08-19T15:01:00.957257Z","last_seen":"2026-06-21T05:12:09.661111Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img18.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img18.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 15152\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-3b30\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe65bc2569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 86, 8-bit/color RGBA, non-interlaced","md5":"993492333deeead64c6e9c7f156f5f93","sha1":"7b3425a05d43f02ca5602217765ff5c4441c9aff","sha256":"35e507f7b0ec8de19e58b31501568123982c678f9e20868f1681ae723f76b995","sha512":"438cc8c9e1f23aab503e367365b5832deb1bebe236ff540dd8a0b058dc3de0bc11e1b8d1272c5bbd5efc1ca1cd934b8754480b31290834ed2fdcc5cd2c75ae64","ssdeep":"384:8GLCj25Ie3qSK6FnA0bQ8yjyoXhKOC989HCzk:B+CqSK6FA+Kjy0I8VCzk","tlshash":"e062c091345049dcf47061a2a1443a66ccd3addc4bfd2f6c5bb8abcd7894a352f9091f","first_seen":"2024-08-19T15:01:00.964968Z","last_seen":"2026-06-21T05:12:09.646263Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/2146884/images/175375720106.png?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/2146884/images/175375720106.png?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 386153\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Jul 2025 02:46:41 GMT\r\netag: \"68883611-5e469\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=traUujNwDPTNGpjBf87ZuXiotO0m2CB.zIgipD3mgh8-1762729831.6937218-1.0.1.1-jVWBBpfKVNY_w8MV.QOnEECI8fgnFKWgFnYG_5pabK4; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe81cce569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":386153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 500, 8-bit/color RGB, non-interlaced","md5":"9a4addadf6ddaa1620c656e2603a28e6","sha1":"d1743042d8b6abb953f946f1d8e66e9a82e6124c","sha256":"d0aed2b6db81888292284a525e53d8bc0f5f32a7f069972e4d62b1b0eed59400","sha512":"9105b6eb7e6e8c8f5e17d4c1a09384062e33d4d482f7ad8ecc2cee73e6d0f2b668e27713d4e37ecd588303a128ef40b78716d2ad2f73c485e37b16b84801c4b2","ssdeep":"6144:tIn5VI3PDPlquBX+vdvDt/lWQtfmeGORo9Z2vCnSHILyocP+ystRj4Sf/klU0QeS:/gvkeJGR94OSxLj2nXk1k","tlshash":"468423c2c9ac1ca29d347dc6e3a7c63eb5820380368394555ddfb98d78e51d2e8cb91c","first_seen":"2025-11-09T23:11:09.053286Z","last_seen":"2026-06-21T05:12:09.715821Z","times_seen":3,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":113,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176094126606.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176094126606.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 30923\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 20 Oct 2025 06:21:06 GMT\r\netag: \"68f5d4d2-78cb\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 269064\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=mhmEmM9elfg7C5eqbTeSXNv3BsslGxqHm2V_bbInVk4-1762729832.198703-1.0.1.1-n7otBq7xQwmE89sZ.T9zkH9YODk1sJUp08utw4wbStE; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3ec9569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":30923,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"31e252f645c07d90378e3105916f63a8","sha1":"3f6f0a30f5add1df79da331c7e73b6e31f893df5","sha256":"ad42b334c567d2c89458383de8e4806f01501477ca9460d4ee1eb420254a9275","sha512":"4bb13deb373ff6cbc91622b2d95235ed8933cac90465782ba275c1b2ba6bab6aa4b0f7b29a6c4216ac0cc36a0a9c9ed6554cea9881ba6de61e8bb89aa61072bc","ssdeep":"768:u092oJbwJZefpA03PWXepBCqZIaL4ho689:uU2oJbwJZefpAiWOpBCqKaGo","tlshash":"7cd2f10d9031d4f26dd1bacfdae92993bd68ddcc025870a4bea673bf913221116533b8","first_seen":"2025-10-27T03:03:56.773445Z","last_seen":"2025-11-22T20:07:21.809963Z","times_seen":53,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-common.6a7ef085.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-common.6a7ef085.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\nx-content-type-options: nosniff\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 488813\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\netag: W/\"66c42e0d-2903\"\r\ncontent-encoding: gzip\r\nset-cookie: _cfuvid=Gy9WjpC2pxzzdN_ZdYtQSCvtlLCF3_FSpwtaJU8RZFY-1762729827.1857233-1.0.1.1-YM4k8P_lUjgEOSReoePolbmCGC3cc0uuQZ9zUrbIpuw; HttpOnly; SameSite=None; Secure; Path=/; Domain=g4.cldfvn.com\r\ncf-ray: 99c0fbcbed223181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":10499,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10499), with no line terminators","md5":"368bb92114139cbd4365bbe8546e3944","sha1":"8cea023f0c27d3b0c0d904b3f0dcf913afc0fc1e","sha256":"2eef2e54b1d7e045296266547e71e8397f5b02563b914ef589f9949faf3348ed","sha512":"b1c18c4ceb122f9b96cfb18c3205a691c1a5c4eb62d2441864ca8759455f532f8e1476cda1b8990c5886a5795ff7dc516adb7b8099ef20aa62b8ecd3532d0a8f","ssdeep":"48:lI6Ol+ZJFy4ctLjTTys1QJ3GmqvtDF2kiIf4zvZCAFsscrdjrlyO1WT/zpwmar1F:l6YZJYlnTfQJ3XlomvZCAWvlHWT/zbKN","tlshash":"ef22fd02f92a66a483234633d84c77a2ee2f5d9eb321755864f38734f49f54ec60663e","first_seen":"2024-12-04T10:11:47.048245Z","last_seen":"2026-08-07T21:57:50.487351Z","times_seen":1132,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":31,"dns":9,"connect":1,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":972,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (972), with no line terminators","md5":"50682381ee718af068436edbcf733eff","sha1":"7500c1531b4dab6894fc3f91ed05cbad52e63f2e","sha256":"dff42fec9ac3e2d2ad95e8d918b078e8bed4efae8562ab82ea8233330eee44bb","sha512":"18f1f2a4647c727c23492a4c714ffbbf07fec6dc3fe096b1ae2936f303e8d78eedf8ee5c85a96a57047e0014b1f2fdee7ce00209bff60cfbe4fc49f2512f938f","ssdeep":"","tlshash":"8611c887d9d15adf54d2a20d15cd46617bd60b5399c47278c3830c8122dc031e7da1c1","first_seen":"2025-11-09T23:11:09.057119Z","last_seen":"2025-11-26T04:35:53.911735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img09.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img09.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 5456\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-1550\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62b9f569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 72, 8-bit/color RGBA, non-interlaced","md5":"d04f9ec0740caab27061a69a248a9410","sha1":"7714ed23e24835f32a9a753ea4d97e0358a755f4","sha256":"f9642c65475694540c60553bfcde87372a85451ee8d6f49acf3802fb109e6a62","sha512":"1722791a35f773bf14f16725737022948760490b144c22598b6cbb4aeaefe3f6393f81711a01baf6f527a6157b2e2977c043a5bb8592e510c6d6dd36d3290e73","ssdeep":"96:DfHfhuWcS81D0bdi+KJ8Sl68xKw+BhLvcnrVPHa1arl92nE8:DBPcgLK3Mw+BhIrd61caz","tlshash":"f5b17ee0e69e1164fa2597d26fe890746db7f6bf4450423a5108ea224eb4e7c134492b","first_seen":"2024-08-19T15:01:00.958372Z","last_seen":"2026-06-21T05:12:09.67488Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-c6aa0208.404b8512.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-c6aa0208.404b8512.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2043464\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e0d-da8\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe79c80569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3496), with no line terminators","md5":"bf24eb9cf305619a814bb8d24fc389ff","sha1":"5f9b911cebffb9c11b466932d879827126fcbb00","sha256":"c3cf77292fa6e9b4bb920dc0bb8114c9d950f92017a0d386ee08126f36cf8198","sha512":"c02d375a48daf09cbbdcaaf2ec11cd214fbe2ce3cf146fe1fde7208d61e7d4687eecf7bb39dddf8155ade9d9b4d995d9aad67f9d9734540cc88efdf766e577cf","ssdeep":"","tlshash":"d5718dd854cb991b201f883b60e0516c2028f8bc98b78f2ce6b36694e977fc616624d7","first_seen":"2024-06-10T08:09:49Z","last_seen":"2025-12-29T10:23:46.524259Z","times_seen":468,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/1753/1787698/images/165012647407.jpg?1628980","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/1753/1787698/images/165012647407.jpg?1628980 HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 387170\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 16 Apr 2022 16:27:54 GMT\r\netag: \"625aee8a-5e862\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=oKS_2E56haKciAVEzWA9lctcxzcQMXdt8B9CD7.2HOs-1762729831.692952-1.0.1.1-9yMIXCxhBZIDFCPY3cqRRjanIx0_eDSXAHJtqvcUqIA; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbe81cca569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":387170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x500, components 3","md5":"d0647b572c635094425307134308d02a","sha1":"5cbc7e05f7b89298ee71ba2515d0d2649f8c6594","sha256":"add8d71e80b8c9d48a20ac00a7146ff38ad793f00255edb619648c3f0947c322","sha512":"89928c2312b36671ed15a87d34b5e45eb5bfa25d9b2f24a5d60194db4ecf95fa2405b67c108e1643066eb04758f20c260b11373e902584c189680c273c0fb824","ssdeep":"6144:vdmU3YjzYhyvU8x2YawLHiePNB8byklRfeCrlPWJ+mjgl08aa58Ls6dxo:vzhyvt2Ya8HtYlPiyJaa58g6To","tlshash":"138423320e316d60f8848c50edb466b5f109e9fb6be3be560641ec87675179a2f12cb8","first_seen":"2025-11-09T23:11:09.060441Z","last_seen":"2026-06-21T05:12:09.622964Z","times_seen":3,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/app_icon.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/app_icon.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 7158\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:53 GMT\r\netag: \"66c42ebd-1bf6\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe87d13569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"7658212310ca0feeededf01dae43ad2d","sha1":"b9b810ce46e89be46cf3452a279644439952460c","sha256":"a6b9872f11bf54afa44cd69da2d1313ff2420275e80155c888e86320bad64352","sha512":"f9cf2af1312c88e38949641ee185b7b5b701a0a8372c0bc2a202760332c402b75d93fe4d4d05043211ffcef11267e41d0f244d2d934d1d82c29c09f90fae180a","ssdeep":"192:Tx1uPxzoabhvoir4zvhs4gXrs8S9EgGbcj7c/s9a1QsIK1/09KQU7:TxWtoaei0zvTgAn9+b/09a1Q61/EKQU7","tlshash":"55e1cf0ea9ca546db32fc1541861464b318abe02cbc7735bb1ec1d2c155603b836ff30","first_seen":"2025-11-09T23:11:09.062284Z","last_seen":"2026-06-21T05:12:09.694566Z","times_seen":3,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/cooperation_family.gif","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/cooperation_family.gif HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 13224\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-33a8\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe8ad36569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13224,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 140 x 140","md5":"f64cf83e1427ddd48c6e19fa73fa0d80","sha1":"84cae79ac3db014266731257806537da2a7a9a1d","sha256":"fefc76f7cc17be1e63c98d9ff10cb059844bf34e6292497c60e2317526bb2754","sha512":"c788f9b66d9b8c58d164070702709947cb09a39ce6588b6c02d721488c240ab5be8292f375854cef42c17f7c64be66e632f0e78245eb317c328760c7beec805c","ssdeep":"192:Qx3BXDBYqfZYttWvUgI5RfUTOD2DZK+RCOYAqEtSIFlCISIsOQZsZuo1KRRmWCE2:QLlXuoUgI5FnDmK+RtqD/IsOaWqUU5U","tlshash":"fb52c07ce94cda47015e7c9a3aa0849d3abaf7c295f6e136a1cdd41b34060fc1305aee","first_seen":"2024-08-19T15:01:00.952047Z","last_seen":"2026-06-21T05:12:09.762476Z","times_seen":6,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/float_brand.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/float_brand.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4529\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-11b1\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe93d8e569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 140, 8-bit/color RGBA, non-interlaced","md5":"1aeda09eeb494b6c48d27cdb673e138c","sha1":"0e8e45e01ec121c790abef9e84c713b701b34f60","sha256":"eb5f449c2c253ed562cd3274106aaba105ec4735e04c6c7154e330ac6f8f8e47","sha512":"a7343a46463daade0e0d5719b9225fee181334693521b950b92a055ea3680e6e416ec8f56b535a0b04f52de25998a59b3db2f409e081357cf1c1770de29c87bd","ssdeep":"96:t5MkVCSlfVe4Ofuntu4oUNdU/SdzJwJaNabyOoaQ6MSa66Vnc:t5MKCWfQ4m4VgkFQaNaG+za66y","tlshash":"6e916c834272d24006a98d3f4b6ca272f5a41e60a75d08fdd45dca9fb711b8ad437692","first_seen":"2025-11-09T23:11:09.065927Z","last_seen":"2026-06-21T05:12:09.709852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XVSPVLR6E2\u0026cx=c\u0026gtm=4e5b50","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-XVSPVLR6E2\u0026cx=c\u0026gtm=4e5b50 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\nexpires: Sun, 09 Nov 2025 23:10:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142742\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429191,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"007b8916f0f5f65c0fe6d8eaac64bf7f","sha1":"ad43e139bd549a9a0aecb8b6ba389e3fe877cae5","sha256":"ec65b561d82549f44abc5fdd084183c315819c290735c3a21ea72a94eca268c5","sha512":"915baa2aaf8f1cd6620f1b7e511f5106c873264d33d9abd0b9faeb4a922be35ad08f0e6bc53155dbbe982a2c2bc518600beb2b787398ce29c2b2aa9ab332c86d","ssdeep":"6144:zJjxe4VuE+astnXRXy16OZd0CdpIQfYhvgJm7Tmn:lFeguaQXRXyBRYhg","tlshash":"e5941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","first_seen":"2025-11-09T23:11:09.069755Z","last_seen":"2025-11-09T23:11:09.069755Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/na.js","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /na.js HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 62072\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\netag: \"7476abb85ddad12b7d60dc0c0f3c8347\"\r\nlast-modified: Wed, 22 Oct 2025 05:55:55 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-amz-cf-id: PeE-HcnVuE1z4lfq8cwYKe2bKYgCrrOhA8PpQ63LuQ7uABwp9tHpGg==\r\nx-amz-cf-pop: TPE54-P1\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\ncontent-length: 13496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30838,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30838), with no line terminators","md5":"7476abb85ddad12b7d60dc0c0f3c8347","sha1":"b13117498fe9167823723561538266cb98d3b39e","sha256":"35cfd44e3068a513c29432ec900439d0905c096c11b7c49eff62438028cec6fe","sha512":"59c241e02e65c13478229b04b190e3cb1cef203a177d7fa52ad1555cbbdaf0f2c7ff77f9effe84943426024c73ac10bdbf7afbee5c085bbc57f1f49695ebbe62","ssdeep":"768:8xc5TDrE5uOVC9eptdECv2wt4cUxwQcg070gFJTb:8wT3GuOwYtdEBwtS9Yb","tlshash":"47d294c9f2d6f0a643e321b0412f270af23ba55a758ec8d0e625d9d16c7854e9133fad","first_seen":"2025-10-22T21:14:36.931739Z","last_seen":"2025-11-30T22:55:17.838688Z","times_seen":105,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-99d68ba4.450ed15b.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-99d68ba4.450ed15b.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 298259\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-20de\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5ab2a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8414), with no line terminators","md5":"1bab78e624701cecc3f09dce63770ec5","sha1":"b5b42a2462d5840a0b17e03616308a2ffd032fe2","sha256":"814183a2f8d28e9255f342d219c8f86ff951615acfa1ff9339cb72641eaeda32","sha512":"d6f1ea79ad20586a22cba6d3b300673bfe5594a4e5fed83fea88fcbcfe4e602682a85ef01b38bac562cd65415b2f3f5775a8770dd6ccab61dd107c43f1f830e1","ssdeep":"192:CT/C5hn4gY4djfeUiI1KdtmUzDoOPDfxtGf3AmP:CT/wItmUzfbj6P","tlshash":"1602b844f5a77b3944aa61322d2bf21133bb3988e376f149bbbc9bd80f54949085139f","first_seen":"2024-12-02T05:42:42.144205Z","last_seen":"2025-12-22T03:17:12.225973Z","times_seen":426,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/news_bg_x.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/news_bg_x.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 326\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\netag: \"66c42ebf-146\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe5fb86569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 52, 8-bit/color RGBA, non-interlaced","md5":"7518bdb2a4d0105da1d019af86a33184","sha1":"10ed970a56477364cead4193ac2dc6eb86f28912","sha256":"3f6d65f8729aa598e573fb3c6ad26e36b4d876881d3a36fcb52ab194b544f29e","sha512":"0b21533627bb55840c51acde485f5039d00f8041c15d1167b8900716b154a34afc164f8b738db84d893e3a2affd5490073b1c0decf6ba9890345cf52b0b494f5","ssdeep":"","tlshash":"32e07dc3a0746ca8d72f9d63d15aae1064235acbc153ebdc984980264387cce4021ea1","first_seen":"2024-09-19T23:01:30.30328Z","last_seen":"2026-06-22T01:20:31.747011Z","times_seen":11,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cldfvn.com/tpl/advertise/normal/special_en_176050870835.png","fqdn":"cdn4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /tpl/advertise/normal/special_en_176050870835.png HTTP/1.1\r\nHost: cdn4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 32907\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 15 Oct 2025 06:11:48 GMT\r\netag: \"68ef3b24-808b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 827472\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=054GgJVuBkhVKYghXn2LaGYA3ict6p6yk2FkEkuLDKw-1762729832.1945775-1.0.1.1-w8_fp336oJinNoA7yaly6kD59MnlC737HVbgm8WP7Pk; HttpOnly; SameSite=None; Secure; Path=/; Domain=cdn.cldfvn.com\r\ncf-ray: 99c0fbeb3ebe569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":32907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"b391af4e9e821b65251d4035ee2df0bb","sha1":"32c4121150525501d3d13d8e421005f6449c91e2","sha256":"ded35f4c74026abbc1ff455bf7ae4bad9774a0c85944c6e8f51e0f54e2536449","sha512":"a8da6901dca12ce8391f1402e149525b4efe9edf7746d48879b56f35ed0f63c7dee0b6d75db2ec976f03cbc7ea79d68eb211a9f9bc82ed16804d1ac7955eae85","ssdeep":"768:D09Bn2f9bhDJ6f+3nnvO7/ZnbeLODa6O0FboaBa:A9Mif+XW7/KOW61VnBa","tlshash":"43e2e15a890bbdb3cd560ff5f8118504833b3a49e6de49b3ead640ee6240bd89470d92","first_seen":"2025-10-31T09:20:08.340859Z","last_seen":"2025-11-11T17:43:33.008834Z","times_seen":27,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/stc/images/static/element/ad-left-down/icon_nav_dots.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /stc/images/static/element/ad-left-down/icon_nav_dots.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/build/css/chunk-b5719a9e.38337443.css\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1495\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 27 Oct 2025 03:03:52 GMT\r\netag: \"68fee118-5d7\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 633889\r\nexpires: Mon, 09 Nov 2026 23:10:32 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbeb7f05569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 40, 8-bit/color RGBA, non-interlaced","md5":"65adaecb325eca6f777c8b377a885b4d","sha1":"e74d0978c28a3889d28f127cf5a1909e631bf885","sha256":"65315399abbd50dc268cbdef77450ce5dbf2395db5a5e4673c88d110f701096f","sha512":"e1a2e5a109a09a9e5c7c45b30a9959bce76a92a31509f6697d009c7f3b2274bbc6e12ab235131084fd8606eeaf4735ddad9e2315d7416bfe30497bf160cad341","ssdeep":"","tlshash":"7731f9e22f9ee8dd40f31735df6b41d56c6d20b9cfe5521d140a004329dabc8a85b760","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T21:57:50.518234Z","times_seen":1072,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-2d0aa5b8.66495c0c.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-2d0aa5b8.66495c0c.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:48:02 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 921816\r\nexpires: Mon, 09 Nov 2026 23:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e12-15750\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbcdbac0569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":87888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61349)","md5":"2dc45d3b6d407867b15e48df70ab4f7f","sha1":"69a31e1d77ece2ca8c8b053340220ad930c70c2a","sha256":"619e3b22326e49e8b485d075b6f3d83267c58515bd8d48c41359fce703df2b63","sha512":"933b34143e0ff8c5a73c77a7d6bcfcde410154867ecb67197b01f1a2c46fe00ee3314439f0d862134032ebb95f61cafd65197de47fa8bb17fbdc1cd14c4f34d2","ssdeep":"1536:3LiBJNLhW+L2zrzmx6GSWq50EW3GraVDso2OyMru0EHgIEBDPC25lG46YPZVnkaK:WFVDsoomBq2YIheH","tlshash":"a88319ddb2cab06247a770b940af610ff236199d684d8400f125e4e9bc78a4e9277f7d","first_seen":"2024-12-02T05:42:42.192784Z","last_seen":"2026-08-07T21:57:50.433609Z","times_seen":1145,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1217.cc/","fqdn":"1217.cc","domain":"1217.cc","tld":"cc"},"ip":{"addr":"103.125.85.149","port":443,"asn":132825,"as":"MYTEK TRADING PTY LTD","country":"Malaysia","country_code":"MY"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T23:10:23.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1217.cc","organization":""},"issuer":{"commonName":"sslTrus (RSA) DV CA","organization":"sslTrus"},"validity":{"start":"Sat, 09 Nov 2024 00:00:00 GMT","end":"Sun, 09 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"1F:DF:64:94:4C:6D:DE:AB:43:D6:70:58:BF:05:AD:BA:28:47:6E:45","sha256":"8D:D1:73:FB:F3:EA:74:FF:86:AD:05:01:CE:BF:92:70:CD:EF:9C:9B:D0:53:4D:C0:20:BB:07:F7:E2:D9:52:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1217.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Jan 2025 07:11:47 GMT\r\naccept-ranges: bytes\r\netag: \"8f18803b2f6edb1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Sun, 09 Nov 2025 23:10:22 GMT\r\ncontent-length: 1068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c96df7b9167af4bf1ecbd7e0330a979e","sha1":"c938b0f61c2cc2c7f93b64f945e2d9a740209e92","sha256":"ab3cb7f3c33856f7ef33fa7b80c4e95e50cb38e0e2ea016337ea66d1e9c355c2","sha512":"7b195b7a64ac6651a36ab0c3e8ce0b8c00ec3dabc14960a11d425a321ce29166a7ee556b26bc08e2739f5ccf1c154b60bbdafcfb1e8370c24b0a90cf24192e02","ssdeep":"","tlshash":"521180f32859cd5a836c82f578f27ddda9867401eb518a76a440630fac89290de73500","first_seen":"2025-11-09T23:11:09.116885Z","last_seen":"2025-11-09T23:11:09.116885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2354,"timings":{"blocked":1053,"dns":1,"connect":266,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"1217.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"1217.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/?aff=100013756","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T23:10:25.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /?aff=100013756 HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:26 GMT\r\nlocation: https://www000554687854.122577.net:8866/web/?aff=100013756#/first\r\nserver: CK6u06Vu4\r\nset-cookie: lang=en; path=/\nlang=en; path=/\nlangx=en; path=/\nIBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; expires=Sun, 09-Nov-2025 23:11:26 GMT; Max-Age=60; path=/; domain=122577.net; HttpOnly\nSESSION_ID=guest; path=/; domain=122577.net\nICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; path=/; domain=122577.net\nIntrCookie=100013756; path=/\nshortUrl=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/\npage_site=first; path=/\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4562,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":3077,"timings":{"blocked":1378,"dns":556,"connect":293,"send":0,"wait":320,"receive":0,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/?aff=100013756#/first","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T23:10:26.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /web/?aff=100013756 HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:26 GMT\r\nserver: CK6u06Vu4\r\nset-cookie: IntrCookie=100013756; path=/\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4562,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2514)","md5":"6752e4e0f0d7eb1eb6a808a36b2c56f6","sha1":"1d19e40ce15ae42ddab259309eef62adcfaa5dd7","sha256":"ac0443cbbb94958395a211d601d85d6441b646db1e746ccc970419cffad1b517","sha512":"8021da875e0befd899e0c504ace1638b75e90daa44d836da7c5e882ad8e5d5685e2e894399755e405c99b9119b97823a21f90a53d1bc32c7b62ea0956ab6e9cb","ssdeep":"96:SotRNDWLyyjjFyvAKT/mq8LPP1d1TontWCe:HSbFyvrA10tTe","tlshash":"bd9197a77a41c0ec6a82a4b14f3db708d1e7992f6d82c420b17c51d80f181de56affd6","first_seen":"2025-11-09T23:11:09.120857Z","last_seen":"2025-11-09T23:11:09.120857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 132\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16556,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (16556), with no line terminators","md5":"0793432e7f5e77cf8b500efdaea3bf25","sha1":"7c8e6ca61ce37d6fb2a5d6549a75f5d8e2bee2e5","sha256":"426c765ea0f003a54f5ce291edc5cab721fc76d9688d97482794be74810109af","sha512":"ed76870fe6f2ea6b594019a8fec41571d067ece51ce0dbb5819668b8c471aaf67d8f933ffff4727077034f10d3d25bfaa6d5397dea291a1d1c2fb91a7f65479b","ssdeep":"384:SwMHiklFnpKM/1GLAxarh0J5mbHlei2dsN5:HMHiKn4/AxbQbHP5","tlshash":"9b72bfb281a74e6fe9f6031991ff035b2241a5e6676da0dc5c33e81e9ecf288e11e454","first_seen":"2025-11-09T23:11:09.124098Z","last_seen":"2025-11-09T23:11:09.124098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-0715e4e2.464ca875.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-0715e4e2.464ca875.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-9a5\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe5eb6d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2469,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2469), with no line terminators","md5":"441f578d9f9fbef832cb0e28a9221bb7","sha1":"66a9dbd19db93504596570f1490d56e0ce603447","sha256":"56de1adcab4e518db353b241d738c13e4e89ee4c9d857253816421bb13605809","sha512":"bfa31879ca6f5e5d910d05c804a38ec6f84fc4f68d89e6e9c10a0f71982c66b04f6468427edae4765840d9dd72082d0617538d0f255cd152b6162740330e51a1","ssdeep":"","tlshash":"695197993187f89709e42196207fb783f1d62c0e6c3ef251d7b1eee0df1198a1129b0a","first_seen":"2025-10-15T04:32:36.032896Z","last_seen":"2025-11-12T23:56:07.334504Z","times_seen":79,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img14.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img14.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3403\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-d4b\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe63bb0569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 72, 8-bit/color RGBA, non-interlaced","md5":"52f9cdb6a7d69ee99045f4f81d6ac5a6","sha1":"614f4daa827c9b3799cfc0e8b08bd6c01bbc2728","sha256":"0449af5181458bcf2d7944239d07c2a1b32083a3c7c03702e7f2be677b267730","sha512":"eb2d2b5638491936db92396479c64001767bbfe40c621dcea245162f559fc1574cfbf2736f4f53758a99c8b7a7480a3c3b9a03d6c8eba8f57031a27c0eb853db","ssdeep":"","tlshash":"a9614ad98fb898ccee3ceb2a0395815251c60a5c4a4112b46b96cdebc059e6e5866b82","first_seen":"2024-08-19T15:01:00.963027Z","last_seen":"2026-06-21T05:12:09.665737Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/lang/en/first_betting_title.png?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/lang/en/first_betting_title.png?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 9162\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-23ca\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe88d1c569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 80, 8-bit/color RGBA, non-interlaced","md5":"656bf14bda32dc80134c246adc4e1212","sha1":"20e04460fec400a6bf5145f8b990d0d8078eeb83","sha256":"352528778685d4a7c4550ea98ab296e2c0298198191095ef0f0687f92fcd778a","sha512":"29cbaf3ce09fdb9492026d6c30d816781e23a6e1d3646c134ae0e43aea1a851ca28bb62bbecff3d213e14125ac46c876c081846e9d423b9daf88a61d47806522","ssdeep":"192:kNqYVQ212KAt9XIwqCKCan1MFGvrLHUGdoEwlVVtDgW5XXFffOD73piti:kNqp28x94wqCnauFOrzXjwlVV5P3fPi","tlshash":"cf12aee67b5bd1d06c843f0be0d921566de363224402ee3ae641f34ee29ac509a16de7","first_seen":"2025-11-09T23:11:09.129729Z","last_seen":"2026-06-21T05:12:09.816592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/web/checkVersion.json","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /web/checkVersion.json HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nIf-Modified-Since: 0\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\netag: \"69018bd3-1e\"\r\nlast-modified: Wed, 29 Oct 2025 03:36:51 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncontent-length: 30\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4c2f1e23246b3828c1812326fc5a9d95","sha1":"f7ebf75b2343a788af3633293e7900b5a3bf3cf4","sha256":"dfee95f97b4b94f26112fc1be6b8ad5f420ff3574b77a6eda6362ac6780e94ad","sha512":"4bc7a81bb78e73446b3bb8bcfbc8bb9df36bf755650b90aac76f96b8e79c5c85a9e4e9e671ee6f8649ab69b534f8c3e7693a4635cdb7abf2cf0de88086756477","ssdeep":"","tlshash":"df8000c02002002000082308282e2802e2a20b8082c30b0c030ba808028e8e80023020","first_seen":"2025-10-29T05:48:39.657531Z","last_seen":"2025-11-12T23:56:07.363273Z","times_seen":36,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/favicon.ico","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:27.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729827$j60$l0$h0; _ga=GA1.1.1661948807.1762729828\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/x-icon\r\ndate: Sun, 09 Nov 2025 23:10:28 GMT\r\netag: \"690bf812-47e\"\r\nlast-modified: Thu, 06 Nov 2025 01:21:22 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-length: 1150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"f8f9881de48722fe537579a916a18910","sha1":"52c1ea538e600d147490c850441aefe613b05464","sha256":"fb86e56a783001f668b75e54a76c1775b2be00f7c97e377436d2a3afec419afd","sha512":"b8e790a4337037d90fb1b2375fd1316089ed53b29c238c14bd38065c5a8cfc0062af6a3286549f832c15b9e61f4fa6a2e7828a0e4d838703a277c1f9d10728e6","ssdeep":"","tlshash":"c021df363fc1bb81dd833032600722bce2e586e26260c32a0c1bc7403fb19afa067108","first_seen":"2023-05-05T23:00:51Z","last_seen":"2026-08-07T21:57:50.492028Z","times_seen":1238,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/js/website.js?v=2","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/js/website.js?v=2 HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 20 Aug 2024 05:50:55 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42ebf-16a\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe04813569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2a3a751e2f0dc57847b31161ed36bfcd","sha1":"c0102dac903815a14493a9342ff1469aa65a43c8","sha256":"ec6ec3527993bd91cf48046c1ccf6ae5e789bffdad3db00b4b86f8bf68d93d5d","sha512":"850aca560f7c1d7c2d55f2fc7ae5b9bb1951a1412596ba3f2f7302871c2c3fb7ff63ecd1bdf6a79c0ee6f64ee57b0135ec4b15fbcebed3e8c1d8f6beeb858a63","ssdeep":"","tlshash":"83e09a6c329024a520b32172b86e30602f087496c807b4a8b4f6ac8c0e0e2b0f95230f","first_seen":"2025-11-09T23:11:09.147823Z","last_seen":"2026-06-21T05:12:09.72464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-3d7f52ef.f6f1f3f7.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:30.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-3d7f52ef.f6f1f3f7.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:48:07 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 421815\r\nexpires: Mon, 09 Nov 2026 23:10:30 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"66c42e17-2149f\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe2d980569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":136351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84181b4000640d252a76b5f28d6ed832","sha1":"07766c22fa2f93ecf0895b0ee850a199f861531e","sha256":"ccacfeccba4792678c2dd4488cc37bd63c3ae9f88ca6314d76ea8556361c9ae0","sha512":"44638f2a2c8b5d3da2401cc121f12cd92380523daaf7e988e3ff76192e436dba15533871e386dffa013236c89bbed390f70862a59dceb0ac7cb22f4073f12a8d","ssdeep":"3072:QXVMfYSq8kyb46d9G4qQ/WmfH76LZL+kkIZJSB:QafxkybDG4qQ/WmfH76LZL+kkI7SB","tlshash":"f0d30889b31071a591e72256539e810263b35855b90ad0e431b6c8dbacbdd9c03ffffa","first_seen":"2024-12-02T05:42:42.170191Z","last_seen":"2026-08-07T21:57:50.552429Z","times_seen":1134,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6a873ac2.f9f800de.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-6a873ac2.f9f800de.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-1c87\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe56b01569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7303,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7131), with no line terminators","md5":"60e709987cd4d0859d415df1d813092c","sha1":"71e0ebb81178d81d6318efca0ae7443e91bb4321","sha256":"f322a42ffa98e1e2cfe1f325cbc557af80b4a06b1ea738c8d18d58000ef6ed8f","sha512":"bd9edb3554ac2c39eaf1f90fb7e98ee4b96905c836438fc7220f59e66eda078b0056e487e3afb39e125bd86599553edcbbb8c12544b7c53b17b98879c014aa57","ssdeep":"192:+wckHfTqK0W6HpHTaI7K6g7GyFcmr7mg9i:gkH+JHTrg7GyFRriMi","tlshash":"abe1858df5dff8690655ed2512bf310bb2292da628785a12f730c9d17c6044ea2b1b3f","first_seen":"2025-09-17T18:13:55.461966Z","last_seen":"2025-11-12T23:56:07.319151Z","times_seen":144,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/static/image/common/bbinlogo/white.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/static/image/common/bbinlogo/white.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4040\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:52:35 GMT\r\netag: \"66c42f23-fc8\"\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 198656\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe60b8d569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 50, 8-bit/color RGBA, non-interlaced","md5":"db48748f650d31e00f56a804af11e208","sha1":"533a4015240987db8589abe1f0dd7e9c27e4d000","sha256":"694c1c81dacbe13ee65a45dc56f96eda380436673e050381bc7421b7b71d1a1f","sha512":"f39473b818ac863065f43ce1b3c0490cdbb398a9c12cc0580e89b529118feef90c047f4f8fb81718e7d01e554f7066cae697ac3568ba3ea0e0cbe2a417cd440a","ssdeep":"","tlshash":"4e818d0603c83f01ac6df025337fe5c9d8ba6ac08d162768ae9bd8480bd86445be974e","first_seen":"2023-05-06T06:50:08Z","last_seen":"2026-06-06T18:00:35.742925Z","times_seen":492,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-81ecbb86.799fefb6.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-81ecbb86.799fefb6.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Aug 2024 05:47:57 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000\r\nage: 254053\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"66c42e0d-eb\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6ec16569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"cd20ee045115c26ea7037df28a636e38","sha1":"7d83e603e0953b5cdecc25dd121b543f5f185e54","sha256":"3d52e64bb064244d42736cca13c343c7ff85a727d203a5b12ed4dda435b93b4d","sha512":"b728310fc1db2efe7971137f01c8a87ff8a911eb563262368b9fbc80fdf72370ed61b8e4db8b459b5d8e17514b4f5b2ca1784ddc849549140ab134a9f65f5f91","ssdeep":"","tlshash":"e2d0a704c7005351f0a399fe98d81070c6f0e8e6fbe649ce764cc74092c3d0040019d5","first_seen":"2024-06-10T08:09:49Z","last_seen":"2026-08-07T00:49:02.431057Z","times_seen":719,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-6a2a33e4.9f03e7d1.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-6a2a33e4.9f03e7d1.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-a6c\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe7dcad569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2668,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2668), with no line terminators","md5":"1a689faafc213b0ab26b733a19ca3c41","sha1":"18b17d826ab4a127c382d725a031c87b98626f75","sha256":"ec4b0cfaf0bd4798a47a919603208c50dd1159238ed5a66ef7b1ffb8d10797ab","sha512":"46612f5074ade1aa95c4f9831889064db740d6481e3aab420a30eb758b48dba4c7c446f9431189793085b540801ff9959b94b17293be91d5696c6f5c6fb7ad01","ssdeep":"","tlshash":"595195a4b682719e0de9004b74d73643a7bb04246d0e9bc6ff7890d8abf0548125932e","first_seen":"2024-06-10T08:09:45Z","last_seen":"2026-08-07T21:57:50.523825Z","times_seen":990,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-7addf818.fe873c22.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-7addf818.fe873c22.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:50 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd2-113f\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe6cbfd569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":4415,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4415), with no line terminators","md5":"d52970844b45c3b675f8d31a6c1aad05","sha1":"fabb02c377a189c9d7f4a4b2985fa4892540cbc7","sha256":"31e48212ac6f262f5fe84026d9923ca60f1783eef4951885bd68ae1132679df2","sha512":"a62af0ff4755b66c25805bf2dd401a78bd52fa76a53f83e927f79f78e269695cb19e676c8431cc20612490b23fc39cc234359556fc9076a2a8d36632ed495689","ssdeep":"96:+C9C6VBWc71puAFZ0rDFLA0foAS2j7dIw66pAGc5:+C9IcJmtlS21PFY","tlshash":"a9916198b0d2a97409de04a128abff05776d794884e1bad7b7f5cbe0161098a4838b7c","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T21:57:50.485957Z","times_seen":1186,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-572431ec.bd001eee.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-572431ec.bd001eee.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:49 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd1-c8f\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe55ae2569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3215), with no line terminators","md5":"0c1bc55216c78da236d6c43e76d0bbea","sha1":"edfc33b800026a70c5ee2beb3b05f97a4dd6e75d","sha256":"072d2f8e945ed2828bc6c631c7160e289aefe58450639699bac6e3beac5fc01e","sha512":"b0c253d1d24fadd6bf61c8d38fe8a9423c3e1f62e254f3868f16e7344b18bcad76179d1e14b8d5a753301cbcb3b1087e8f7ed8a2845642cedff7f764cd8e7e2a","ssdeep":"","tlshash":"0161849cb8dbbfb30a410059a9aeb341b14a3c0689bf65d3f6fa9bd44b144d9413070f","first_seen":"2025-08-08T19:53:19.481529Z","last_seen":"2026-02-22T16:07:12.59479Z","times_seen":421,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/site/macaucasino/ver2/image/footer_img06.png","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/site/macaucasino/ver2/image/footer_img06.png HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://g4.cldfvn.com/web/site/macaucasino/ver2/css/template.css?v=2\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 3348\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 20 Aug 2024 05:50:54 GMT\r\netag: \"66c42ebe-d14\"\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncf-ray: 99c0fbe62b9a569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 72, 8-bit/color RGBA, non-interlaced","md5":"e84b47f902417ad14734ba3afc699870","sha1":"538358a68b9c7d9181dfa80e02bf643df9fe9d89","sha256":"85514df84ba89c65dab7211b8aca63fbdbcb095cb28f7910a1224f20a183ac0a","sha512":"f816366fc2e8f2c18f5b890929da663325041ee5f7d0956038d6c0109d7ebaf102a38dd5238624fdb269bc58a04a380aa2c93e2605da996684dce0d74d89c8a9","ssdeep":"","tlshash":"40617f6271a5285f40c6235deb1bd73609fff5abc519176d8ee0b361148f8a52b5d002","first_seen":"2024-08-19T15:01:00.955974Z","last_seen":"2026-06-21T05:12:09.642104Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www000554687854.122577.net:8866/entrance/api","fqdn":"www000554687854.122577.net","domain":"122577.net","tld":"net"},"ip":{"addr":"165.84.198.229","port":8866,"asn":55303,"as":"EAGLE SKY CO LT","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.122577.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 30 Nov 2024 00:00:00 GMT","end":"Tue, 02 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D0:8F:47:41:EC:D9:27:C7:6B:18:80:D9:D3:8E:EA:21:A7:7D:76:01","sha256":"13:0F:A6:CB:B8:9E:7A:F7:4D:0E:D4:A5:6B:21:55:BC:56:12:DC:6A:E6:B7:C3:8A:36:48:97:78:AE:8B:F9:4B"}}},"request":{"raw":"POST /entrance/api HTTP/1.1\r\nHost: www000554687854.122577.net:8866\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 100\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/web/?aff=100013756\r\nCookie: lang=en; langx=en; IBCACHE=SfhqXlF0PVfKM-XrU6M6e_oJyLXRx-5HsT0EFY_SG099oZwToJcdn-vdxr9MnjRYaDZQV3d3VHJQUDY4eFZmTE5GckUtbEl0azFlUW1YYlBwMmdtbzZBOXZMMA; SESSION_ID=guest; ICCACHE=GbwPLdGGTeypoRRnA53K%2Bdpc%2BVzSsTfdVOz9kz9OC7U2eWtFelA4QjdkUmlVa2dU; IntrCookie=100013756; page_site=first; _ga_XVSPVLR6E2=GS2.1.s1762729827$o1$g0$t1762729830$j57$l0$h0; _ga=GA1.1.1661948807.1762729828; XID=U4GsV4x/iHpEw0m513Obcg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\nserver: CK6u06Vu4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13200,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (13200), with no line terminators","md5":"f7399099aa1e29a951c1d9455b3314ee","sha1":"c35ab620fc9478952a7d378dad0d4ff2c71daab5","sha256":"ee835abde802af8d63742c2a714cecee6236aaacd2f7be0fb3375b314dba39b0","sha512":"439a53d4578f9fa08504d876d14a5a040897b9d99e9f8d27eb6dd0d4f37515dd9fd60f934e439f5601ebb128d1cc2653b899c327b45740b1ba541ed145ec7a4e","ssdeep":"192:CqS7FZec5r+wuTRQgjlzTfFeOi4BeRf06WOkDW22HbwQjUDe557DI:CqS5YIrAbjlzTdiweh06Pqa4DeE","tlshash":"92528d028ad01fb548e8652381ff4c0ee5e358c355793e8a97a13d2a6ff32898517ad6","first_seen":"2025-11-09T23:11:09.186199Z","last_seen":"2025-11-09T23:11:09.186199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/js/chunk-17b675f6.4cda0fff.js","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/js/chunk-17b675f6.4cda0fff.js HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 03:36:48 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1012966\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"69018bd0-b0c\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe85cf1569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2828), with no line terminators","md5":"a9c23963189861f099c2a761353311c1","sha1":"89d5f08618370753d3f3792c33b8d17e01288cf3","sha256":"bb3be2e402c38915bb3f256ceebc06e919e65cdbd893afa0647f3a63fdc0430c","sha512":"31359e90a032dfc4a08bc511faaddea79ee5ad3c42f3156a4c341a90e27705b3f3ffd4c31d2031cb73fac43dd466ef32944bcea4e1f93790c9df2bd041f6b5eb","ssdeep":"","tlshash":"c551524c75d6e89254e98144502ba785b32e2a4f0830ed5adbe1e2d3b960e4e417af39","first_seen":"2024-06-10T08:09:46Z","last_seen":"2026-08-07T00:49:02.399391Z","times_seen":766,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g4.cldfvn.com/web/build/css/chunk-b5719a9e.38337443.css","fqdn":"g4.cldfvn.com","domain":"cldfvn.com","tld":"com"},"ip":{"addr":"104.18.26.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:31.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cldfvn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 04 Nov 2025 00:00:00 GMT","end":"Sat, 05 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:51:1D:34:36:59:E7:6C:91:11:90:B7:CF:59:F4:C7:1E:8F:1F:4B","sha256":"10:5B:8F:EF:56:A3:28:5A:3E:41:AD:45:31:44:46:21:D4:FC:37:6D:E9:1E:F6:17:B8:0D:60:88:40:3E:84:75"}}},"request":{"raw":"GET /web/build/css/chunk-b5719a9e.38337443.css HTTP/1.1\r\nHost: g4.cldfvn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nCookie: _cfuvid=rmucAcQ6ivB3EDMECEAQGmf64Rp9w67RrZv9WlFs3xc-1762729827.189734-1.0.1.1-PNWet6K_9yCIQwvge2iNhiQlQOnSyPQDi_4LpCLaekw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 09 Nov 2025 23:10:31 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 03 Sep 2025 03:02:29 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1286157\r\nexpires: Mon, 09 Nov 2026 23:10:31 GMT\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"68b7afc5-4b2\"\r\ncontent-encoding: gzip\r\ncf-ray: 99c0fbe8cd50569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1202), with no line terminators","md5":"43894ba5933dba1a6ce22e9ed6d86244","sha1":"a3ceb19f96b2062a8e6c899de58adb7b7d6e2283","sha256":"6831d9fba5bce6619bc9ed9358a1f0a9c14a9e923ae0850945cefa7c5a8408c0","sha512":"6a6059c75c7dd575e2387e56b2ed96cbf6f20ae921097e315cf33ef5a56a3b6bc42184a9cc5fc19bf48248e73ff8e124d001e9b7939be0ff5bb94e801198234d","ssdeep":"","tlshash":"7c21c10c3b5c31e64577872448b5dab8cc70fa82a3766b1d0e552c2eea9a8d53d3e5f0","first_seen":"2025-09-07T13:01:15.207621Z","last_seen":"2026-08-07T21:57:50.471127Z","times_seen":839,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.agilenavi.com/api/fetch_time","fqdn":"analytics.agilenavi.com","domain":"agilenavi.com","tld":"com"},"ip":{"addr":"54.178.240.30","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www000554687854.122577.net:8866/web/?aff=100013756#/first","date":"2025-11-09T23:10:32.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.agilenavi.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Sep 2025 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:C7:A3:FF:03:D2:4E:85:F5:7D:C3:89:6D:5F:F0:BF:34:8D:83:00","sha256":"D9:80:B9:31:B7:37:96:C8:F0:C0:E4:7B:2F:5F:4A:41:80:85:A0:51:29:ED:63:16:8B:E2:3D:BE:2E:36:4A:96"}}},"request":{"raw":"POST /api/fetch_time HTTP/1.1\r\nHost: analytics.agilenavi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 777\r\nOrigin: https://www000554687854.122577.net:8866\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www000554687854.122577.net:8866/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 09 Nov 2025 23:10:32 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}