{"report_id":"96c8def4-0020-4b39-9205-694fbd5bed9a","version":6,"status":"done","tags":[],"date":"2026-02-06T21:49:12Z","url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":0,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"title":"CVCPlaySpin_bot","dom":{"size":1941,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1715)","md5":"887b1a39c2f8105428698124fa25a011","sha1":"250a122289032d7e76d98a45cf1fed472b5f3642","sha256":"52e9358dab0ed2c472f104d896128cf3f77f161ce716dd131a52b33231af01a8","sha512":"b2e1a14e5a4a3229a86aa62bd1cb066f068fcd7b2cb30ce3939506b67b38d12c369fdb94011c8bb9580f222502a0e38096635ee75a47b4a454d7dd180bac5cde","ssdeep":"","tlshash":"0c4146cb38a1a07ac75246952275121c57b351243dc6f090fead9d4a3f1198ea3f2bfd","dom_hash":"domhash9d2c2861e99693e2302b0c483c2a35f4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":0,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T21:49:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-06T21:48:53Z","timestamp":1770414533,"ip_dst":{"addr":"Client IP","port":50106,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.167.71","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-02-06T21:48:53.762527+0000\",\"flow_id\":170387287933147,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.167.71\",\"src_port\":443,\"dest_ip\":\"172.18.0.12\",\"dest_port\":50106,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:41:44:0D:4C:44:9A:91:72:6E:CB:4B:3B:A3:64:07:7D:75\",\"fingerprint\":\"89:be:39:86:01:62:94:0a:25:31:1d:1c:14:e5:f6:63:ac:8a:94:ad\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-30T03:02:30\",\"notafter\":\"2026-04-30T03:02:29\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2026-02-06T21:48:53.688347+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-06T21:48:53Z","timestamp":1770414533,"ip_dst":{"addr":"Client IP","port":50116,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"109.206.167.71","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2026-02-06T21:48:53.765304+0000\",\"flow_id\":1638666955227578,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"109.206.167.71\",\"src_port\":443,\"dest_ip\":\"172.18.0.12\",\"dest_port\":50116,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=vast.yomeno.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"05:41:44:0D:4C:44:9A:91:72:6E:CB:4B:3B:A3:64:07:7D:75\",\"fingerprint\":\"89:be:39:86:01:62:94:0a:25:31:1d:1c:14:e5:f6:63:ac:8a:94:ad\",\"sni\":\"vast.yomeno.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-01-30T03:02:30\",\"notafter\":\"2026-04-30T03:02:29\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3466,\"start\":\"2026-02-06T21:48:53.688570+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"d3rem.com","ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-03-17","domain_rank":158480,"first_seen":"2025-06-16T17:14:21.532587Z","last_seen":"2026-02-03T13:31:38.746462Z","alert_count":0,"request_count":9,"received_data":67986,"sent_data":7036,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2026-02-06T08:27:57.146544Z","alert_count":0,"request_count":1,"received_data":18632,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"richinfo.co","ip":{"addr":"5.200.15.239","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-06-20","domain_rank":162160,"first_seen":"2019-06-26T13:58:03Z","last_seen":"2026-02-01T23:59:48.430918Z","alert_count":0,"request_count":1,"received_data":253635,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"www.app.cvcplayspin.xyz","ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-02-06T21:14:19.875718Z","last_seen":"2026-02-06T21:14:19.875718Z","alert_count":0,"request_count":7,"received_data":1936654,"sent_data":3341,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-01T23:21:11.670157Z","alert_count":0,"request_count":6,"received_data":2362535,"sent_data":2689,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-02-04T11:51:17.83194Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":2,"received_data":101365,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-02-04T12:41:45.281315Z","alert_count":0,"request_count":3,"received_data":2588,"sent_data":1529,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vast.yomeno.xyz","ip":{"addr":"109.206.167.71","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-09-18","domain_rank":173278,"first_seen":"2019-12-12T11:10:55Z","last_seen":"2026-02-06T21:02:36.94987Z","alert_count":0,"request_count":2,"received_data":3049,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.tgads.space","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-02-05","domain_rank":2047742,"first_seen":"2025-06-16T04:18:38.720164Z","last_seen":"2026-02-06T21:14:19.919525Z","alert_count":0,"request_count":2,"received_data":52162,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"js.onclckvd.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-12-13","domain_rank":1770777,"first_seen":"2023-12-27T12:29:51Z","last_seen":"2026-02-05T02:28:59.180586Z","alert_count":0,"request_count":1,"received_data":335562,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":1,"received_data":103029,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-01T22:20:39.584991Z","alert_count":0,"request_count":1,"received_data":440904,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ad.gigapub.tech","ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-02-19","domain_rank":3643022,"first_seen":"2025-06-16T17:14:22.155887Z","last_seen":"2026-02-06T21:14:21.168305Z","alert_count":0,"request_count":7,"received_data":59865,"sent_data":3898,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"munqu.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-03-17","domain_rank":431079,"first_seen":"2025-06-07T17:06:52.754111Z","last_seen":"2026-02-06T21:14:20.371695Z","alert_count":0,"request_count":3,"received_data":511131,"sent_data":1236,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.giga.pub","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2024-12-25","domain_rank":3665389,"first_seen":"2025-06-16T17:14:21.521791Z","last_seen":"2026-02-06T21:14:20.026321Z","alert_count":0,"request_count":4,"received_data":218466,"sent_data":1944,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.adexium.tech","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-03-31","domain_rank":0,"first_seen":"2026-02-06T21:14:19.30142Z","last_seen":"2026-02-06T21:14:19.30142Z","alert_count":0,"request_count":1,"received_data":43060,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-02-02T06:50:38.481119Z","alert_count":0,"request_count":8,"received_data":1020897,"sent_data":4022,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maucn.netdeliveryservice.com","ip":{"addr":"195.201.185.32","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2011-01-27","domain_rank":2129770,"first_seen":"2025-06-16T17:14:22.690897Z","last_seen":"2026-02-06T21:14:21.272341Z","alert_count":0,"request_count":1,"received_data":322,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ruksoutsaishu.com","ip":{"addr":"104.21.80.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-24","domain_rank":194972,"first_seen":"2025-03-25T06:46:26.879772Z","last_seen":"2026-02-06T21:02:36.814282Z","alert_count":0,"request_count":1,"received_data":3074,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sad.adsgram.ai","ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1355893,"first_seen":"2024-03-07T17:14:48Z","last_seen":"2026-01-20T06:41:58.12159Z","alert_count":0,"request_count":1,"received_data":182508,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"yandex.ru","ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-02-04T11:31:42.77904Z","alert_count":0,"request_count":1,"received_data":441236,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":16766,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bid-net.gigapub.tech","ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-02-19","domain_rank":2949929,"first_seen":"2025-06-16T17:14:21.52244Z","last_seen":"2026-02-06T21:14:20.469269Z","alert_count":0,"request_count":10,"received_data":5248,"sent_data":5347,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2026-02-06T08:27:58.121381Z","alert_count":0,"request_count":2,"received_data":924,"sent_data":1203,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"richinfo.co/richpartners/telegram/js/tg-ob.js","fqdn":"richinfo.co","domain":"richinfo.co","tld":"co"},"ip":{"addr":"5.200.15.239","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"12a78f58864cade5d164beccd3b3f617","sha1":"eb1a31d615b0fefb556c05b37859669b88e5a92f","sha256":"187da98abe3e2ae125dd08bf8335c464a42b9afb06f84a264cd6c6b571825529","sha512":"2a1f8964af62bf3c1c4617f31bf6e0fc0c0f477666800dd3700bb37fccbc25cbcc5032b4f565edf778a00e4d075312e98135b1d1b8f7dbfece0215eb602e0c74","ssdeep":"6144:HTXnvYVp1BEe+KpaeIG8zgRHrJ5N5nkfvicNKKOVWCYuOtKduXn:HTfYBSE8eIG8UtVnK6ckKrn","tlshash":"0a3470812bc1fc9d13874b763336a5e6e5298f99a4890b8af054fc54f09e913faec570","size":253126,"data":"","first_seen":"2025-12-04T11:23:29.55944Z","last_seen":"2026-02-06T21:49:19.086855Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-13T18:13:53.104118Z","times_seen":28133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/html5-qrcode","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d88d3200cb547c9e86ee972975561dcd","sha1":"e3c006ca0e03e145c58082471ab651415ef644dd","sha256":"660b12437b1d747e3e68b8be0685c08cb728140110ad213f167b14b66f8b1d8e","sha512":"afaac303b5ba65e421be5f12ef24554142951dd7b1abe18094d90d36a542ed8c8857e370a824c97b684358289f7d3c9134e78613345127d89fbd19bf1c2cc662","ssdeep":"6144:bmGilTOabmeTmQsdkjtG+47qc263kDsTKUOwpSkPwDsO/Ae9hAyb3cK:CGEBTmQsdkjtG+47q83kLvs0Ae9hAybb","tlshash":"b284f99172a170f293da11da04760045f76a65a8780a447cffa8addb6c79cc392fef34","size":375364,"data":"","first_seen":"2023-06-15T19:11:44Z","last_seen":"2026-06-13T17:40:25.43185Z","times_seen":1660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/script?id=4669","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2e3934ffda584a08df72fc71905aa63","sha1":"a4dc51398555be189faa9a54594294572d47b236","sha256":"d0a2218fb2ff645cd13866a1407c6b23a473fb4e5b7c1ad1b09e75f211803208","sha512":"05d5f2b3f1afc6a00bc143c3e05a622c6721b286ed79a98fe74dd0e40dc3138a46f5edee2c9def7f17e49a840dabaaef473aea603e84445067eaba10cb9e80dc","ssdeep":"768:3IfSLX6ug6d0cpRrD8sglM7jagaByi13519Q+XjV34ko6YqiQaZGJaF6QEQNOku0:hLNWRBXxkUKEHnrB0j","tlshash":"a443d5546f65e23f479898b742324141c2590e8df68cdbdef3bee8016998712ba7d338","size":57242,"data":"","first_seen":"2026-02-06T21:14:27.856583Z","last_seen":"2026-02-06T21:49:19.078021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sad.adsgram.ai/js/sad.min.js","fqdn":"sad.adsgram.ai","domain":"adsgram.ai","tld":"ai"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3841fc6a8657d23daeb0d59162b5f7f1","sha1":"a746cffecce1ca4972aa42a06fa19398c3097a9a","sha256":"8c294bd83521a7707e3e827b92409555f49eadcbdc308c950c893d7e787ad28b","sha512":"4a03e95371564de10c3cb21029d85c124f888dbb5efaf4e8dbb1409b9ca633e29cb691c259bb1a8d6278e13d7a4d72b330b5c68fdf6dfbcf5fe6afa3c4e73598","ssdeep":"3072:HH2yNUbCsC766XOdtClgCUd6V4BKGT0NJkMKE:jy2sG66edtClnMDKGoCMKE","tlshash":"81045bc8b251f03453a300fa557b450ab3356d56f80a8188f16cedee1eae849a377f79","size":181820,"data":"","first_seen":"2026-02-06T21:14:27.814734Z","last_seen":"2026-02-06T21:49:19.064499Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tgads.space/assets/js/adexium-widget.min.js","fqdn":"cdn.tgads.space","domain":"tgads.space","tld":"space"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3546afbd3c66b3406fa77fbe32182a37","sha1":"37fb93561c1cd5aaafff9498a1e711baccd2e805","sha256":"3be7108c1c053b8a43bd5a20b39bdbb1c28482b2c850aa8b2884a5ec038286d8","sha512":"ba3238df1a87c8cdeb9c5586b092076048abfb5557faafb80e89a9fc50ecf81f2bcbd1d90b03f12188b0c480bb0d19dd5cd99b7fb41b32f35cd1308eabfe6858","ssdeep":"768:AIJqHM/x7SU/gsCuUgYqKTWwVn/ObjspUXyyVJGajT9SDdY1wmevQnAiB6c9/vjm:rJH/x7eNucqMFgsm3uXleRYm54","tlshash":"4d13b4a1e668e27c9f6e44db05304420e97e1f40305d6eb8b0bde56e3ed5b83a73d1a4","size":42108,"data":"","first_seen":"2026-02-06T21:14:27.83349Z","last_seen":"2026-02-06T21:49:19.070496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/105bd0c50559d82f5048.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"72cab3ed33cdc767d122267c1f1aa111","sha1":"4f1c872ba47a25ce2ef8e679d615d5807b9c76f0","sha256":"74a28a0e1d8356f13dec5458c05b0e78da92409109e6dae1b59d9447098bc6f3","sha512":"b722707414d81b1e9e1afbd6507335418ab4368e3841a9c8a01cab35b1ada092f715b5966f913261d64ddb5991ac446da946e9ba3727e9a7816f4d8638e845cb","ssdeep":"12288:QnzBu9/dCvKl9YmLIKhg4LhIIB+WjnHhBPOjLInhB/YGxph:n/ovKl9YmLIKhg4qW+WjnHhBPOjLyxxf","tlshash":"88e4f8d9fa5170b542e794e9c03f160ea23f7519700980e4b766ece26c78a8e6123f7d","size":714265,"data":"","first_seen":"2026-02-06T09:12:52.934073Z","last_seen":"2026-02-09T05:59:08.979135Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/script/giga.bid.release.v31.js","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"32f08aa55c5f3df00f878106a00fd310","sha1":"97608a5d89cd8d25eb397097b2183e1d10dbd43c","sha256":"2b325a8f38935cd3b375b021459ba0b8b98b250894565e959167b6c11896cb51","sha512":"4aa6f971eff1720a4e267ffab3c826ed3c54a52916c55cf13a56fdaf03442c11a2dbcf9996d469c33454a529944b24ac63d7fa61c6ed3e5d21c15ef11846314f","ssdeep":"1536:qD337Y2qQ14NweYUdLdPdeyfOjobyO67GWlco9UHw:qDnk2qQ1kneyGjdNou","tlshash":"0ca30e9c7f01e62d958596ff2b384489d8011f09bdcc47ddf799f826e5a8227a87c30a","size":106383,"data":"","first_seen":"2026-02-06T21:14:27.811599Z","last_seen":"2026-05-16T04:06:49.723302Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckvd.com/in-stream-ad-admanager/tma.js","fqdn":"js.onclckvd.com","domain":"onclckvd.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a81febb7719ba7fce8253dc5eb29d2","sha1":"3585fd3f733f4a4a345c4761126870d19f0fac16","sha256":"5df51c23e67bdec873efd12a59cd1cd8baffe0e685881732508fc7f430bdbd86","sha512":"6ed1563b6178affbaedf7997ef24c2c86df4c71310c14f881d3b242ff7f32cfc0a61aef42add212bdcd87ba142d78141c211ff377378e53096dd77dc58b4633b","ssdeep":"6144:4rxAsc/iLH9F8sAvooiPQCCu2onfI2BvMUcno2zqOPEJ4eno2zq6Uo:+caLH9F8sAvooiPQCCu2onfI2BUGOM4u","tlshash":"8a64299c72c2f07543e361b5803f110af33a2959a80d5460f669d9d6beb8d8a8237f7d","size":335174,"data":"","first_seen":"2026-02-06T21:14:27.827019Z","last_seen":"2026-02-06T21:49:19.080517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/8e4b5a92408827a5e9f8.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"137e42995456ee1580f6191c829d94b4","sha1":"378337eb6e0971d67010bd9c2b90f749f314942d","sha256":"72fde0e6d26ff1f439423de749619785364f93e55cd8916154e130bfe9ffabab","sha512":"1f7b7171c4b58ea19200c8ae7cd7bc93ce1bc7ac51ab6bccb170bb4678916cc1d8d0d0676ee8b64ec6536a5ba4e05d5ed1c102c0e32109a0dfbc49a70d9d9772","ssdeep":"192:UwAHIp52spjlpQ7YX0lQsm+24q2BTXV3UGUPLe7trH/clY9u4FdHN3vgfye/K19I:Uwpz2+lpQMXZ+2l2BTYPVlY9P6fyH4R","tlshash":"a762e79974d5b4a513db20bb413f150ff3ba6879684d80a0f222d8e97ef885c8167f6c","size":14938,"data":"","first_seen":"2026-02-06T09:12:52.9539Z","last_seen":"2026-02-09T05:59:09.035503Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-05-12T02:27:32.127067Z","times_seen":3808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-06-13T13:35:55.835915Z","times_seen":4403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","size":169947,"data":"","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/loader.js?t=1","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7b4428d10446f993b31948e01298774","sha1":"deaeb95e9334f095b25012388b5ce27a8a14efc1","sha256":"ec95cd5c6fd449c09902fad0c1af33e0d76c30866986fed52ebbda352fc640ca","sha512":"46257eb835447567da74fff276909537512e3e10789e51feb472f10baaef0bda4d20d84c0fd4cab1fa0c43307928033061af39cd3bd4658891791c8a060d0f60","ssdeep":"","tlshash":"4d21045e28af9230016371ee173fbbc4f197502744a0c8487ecd96903f22a1bc401b98","size":1183,"data":"","first_seen":"2026-02-06T21:14:27.804449Z","last_seen":"2026-05-16T04:06:49.721911Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","size":169947,"data":"","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-13T18:28:49.688071Z","times_seen":7045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrcodejs/qrcode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-06-13T18:31:19.802279Z","times_seen":62018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@tonconnect/ui@latest/dist/tonconnect-ui.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f20a035fb3be74dcd6b3a8982b3e370","sha1":"e3d7e9a056f592a2ff399fb7117efae752ffe4c8","sha256":"5c547b1f367f8d51c3bc1545514ba348919a44c35948dd2c7a13a84a7f2d6ff5","sha512":"95447864c1f2cc25f61732cea78bda9094335718b117b9da9ef7ca44b811419b7a294868a8a3c9e65aac9471adff54b5be9777ebff720014688fd914f4b0a504","ssdeep":"6144:1h59SKz68jbJiVnec/yCXwVxwWJ7aA4bxEwsOX6333oaAzWr9Mn822RXzLvto6b9:hrs7aLVxmFxEwsO8tAaqnz2Rp","tlshash":"d5944ac6b3d2b16027974bd940774522f3391dba380884b8f76d88867e705c9d27bbb9","size":419805,"data":"","first_seen":"2026-02-05T01:06:43.235214Z","last_seen":"2026-02-22T22:16:32.988145Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/loader.js?t=1","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7b4428d10446f993b31948e01298774","sha1":"deaeb95e9334f095b25012388b5ce27a8a14efc1","sha256":"ec95cd5c6fd449c09902fad0c1af33e0d76c30866986fed52ebbda352fc640ca","sha512":"46257eb835447567da74fff276909537512e3e10789e51feb472f10baaef0bda4d20d84c0fd4cab1fa0c43307928033061af39cd3bd4658891791c8a060d0f60","ssdeep":"","tlshash":"4d21045e28af9230016371ee173fbbc4f197502744a0c8487ecd96903f22a1bc401b98","size":1183,"data":"","first_seen":"2026-02-06T21:14:27.804449Z","last_seen":"2026-05-16T04:06:49.721911Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.adexium.tech/assets/js/adexium-widget.min.js","fqdn":"cdn.adexium.tech","domain":"adexium.tech","tld":"tech"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3546afbd3c66b3406fa77fbe32182a37","sha1":"37fb93561c1cd5aaafff9498a1e711baccd2e805","sha256":"3be7108c1c053b8a43bd5a20b39bdbb1c28482b2c850aa8b2884a5ec038286d8","sha512":"ba3238df1a87c8cdeb9c5586b092076048abfb5557faafb80e89a9fc50ecf81f2bcbd1d90b03f12188b0c480bb0d19dd5cd99b7fb41b32f35cd1308eabfe6858","ssdeep":"768:AIJqHM/x7SU/gsCuUgYqKTWwVn/ObjspUXyyVJGajT9SDdY1wmevQnAiB6c9/vjm:rJH/x7eNucqMFgsm3uXleRYm54","tlshash":"4d13b4a1e668e27c9f6e44db05304420e97e1f40305d6eb8b0bde56e3ed5b83a73d1a4","size":42108,"data":"","first_seen":"2026-02-06T21:14:27.83349Z","last_seen":"2026-02-06T21:49:19.070496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/script/giga.bid.release.v31.js","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"32f08aa55c5f3df00f878106a00fd310","sha1":"97608a5d89cd8d25eb397097b2183e1d10dbd43c","sha256":"2b325a8f38935cd3b375b021459ba0b8b98b250894565e959167b6c11896cb51","sha512":"4aa6f971eff1720a4e267ffab3c826ed3c54a52916c55cf13a56fdaf03442c11a2dbcf9996d469c33454a529944b24ac63d7fa61c6ed3e5d21c15ef11846314f","ssdeep":"1536:qD337Y2qQ14NweYUdLdPdeyfOjobyO67GWlco9UHw:qDnk2qQ1kneyGjdNou","tlshash":"0ca30e9c7f01e62d958596ff2b384489d8011f09bdcc47ddf799f826e5a8227a87c30a","size":106383,"data":"","first_seen":"2026-02-06T21:14:27.811599Z","last_seen":"2026-05-16T04:06:49.723302Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/068a863816c1593d3c3e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"582ffcd3e4a5451f8868c96390d67345","sha1":"95bc600b83f5345f64247f30648bb1a1d0664ffc","sha256":"af2a9727707de353552a3a9fe6dd44adb8aca268a19037fca9571c35841e4415","sha512":"18967c28bf5dd7075af99b51e0d60daffeb23c30538fed11e4d52cf682da593156bc653f07a71b6f4bdf56d7bc16a62f481140889ad61d92f2b69e20ec6c9ec7","ssdeep":"768:oIQBshVVNu+NSW/lUSuZqyaEDVPrBDj3yjGkSF0/pnr2FAY17h8q:fQBqK7Zqv8BD7y/FIAYxWq","tlshash":"2273ead97595b9ba02c3d8f1443f220ee37b9611711a6580b323dac1ec25adf5223e7e","size":75049,"data":"","first_seen":"2026-02-06T09:12:52.893539Z","last_seen":"2026-02-09T05:59:08.98244Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/pxl.iframe/","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce2f5dba63461a8a16aac2f95608b2cd","sha1":"cbb1cb63734b71eedf6887dacac512dc5ea7fd31","sha256":"bfa76325505b9d1f0d92b839443d5afc6066f4105028cd7d52ae96e320c765cc","sha512":"249a363c852e491fb7bc595b54b53fbeebe364c219191f71ad1d6dfd32f981622740a3743fb5565e2a1de63b50af4e6ad310307afb9e4018f16224be6036070c","ssdeep":"","tlshash":"233126cb78a0a07dc75305d62235122853b752243dc6b091ee6d9d4a3f1198e63b2ffd","size":1737,"data":"","first_seen":"2025-08-16T15:28:34.714673Z","last_seen":"2026-05-16T04:06:49.729256Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ccdb5c90ca32266cf2f0dbc529a4d0a","sha1":"b5f1e3778e02c35288757de9d6c61047ec1b281c","sha256":"17c9c1105a89db5665e481ebe28fdb9367bd3f60932ba946d691cd4f63fe6e86","sha512":"c74cbfed78cd5a07d1ffe8fbb19e1954eed654aef214c9bb7c4cb1080014355da3af09c071b904e8a1dbc885d245197a403b068d3537d0168f4eb53cdd6df460","ssdeep":"1536:Jwk6ey/PIZHo+DqA55l6DbJZ8VUbzIYbRd:Ae2Iqol6Dbn8gIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","size":79889,"data":"","first_seen":"2026-02-03T04:25:08.402639Z","last_seen":"2026-05-16T03:25:17.333694Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MRZLZCTDFE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb6ef311d86e5d5d2f5164bcac8699fe","sha1":"f930c3dbd76343784371dbd7658a06d679db8aed","sha256":"4acabfefaae73ee04a1a3f0d131d69617539385e67064d82d2ab1eb343a3ddfa","sha512":"48ff4a8aa6791243adcaecadfbb70ca7c445a4e599f5fc52b08f3e122d9a92c263ce7895407c83586322902dd85f9442a08e70ccff3a05e4d59a6026f5f6fe49","ssdeep":"6144:vIbh3hDHzzfR681qbOqR51/48BjM3cp81Qj3AEFytI10KTB:wbh3hDTz56nbD/48BzFy4B","tlshash":"b39419de73c674225396e478502f018ba57b28a2f48cc89af189cce42d74a9a4177f7d","size":440300,"data":"","first_seen":"2026-02-06T21:49:19.093527Z","last_seen":"2026-02-06T21:49:19.093527Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/29dc65efb02411e33e58.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ee015fe09acec232b4fe478176ee85","sha1":"2d03fcf9c2342bd234aeed80e9dbde61eae9d311","sha256":"7105dd55a0ba6142dadf9e8f83bfa58b75e81c5ac95104ca53fb852c230e9f5d","sha512":"097881ebd3368d6297a959b096d297bae15ee5d86a3ab2b71ab5dc65e9fb00c7dc346267885556fa4b246f9da61d2ec290e1ce99fd04585b7910651ac033a94e","ssdeep":"96:zT6C4xYdDWcDSfjmPOxw4BoL8QzZQ5E+HASp6MH:zTndSOOxK8QIE5MH","tlshash":"75e1aa5a788134b31b2360fd566fdacc24f76651ace6b7912a94cff2cc7b60e4142b18","size":7161,"data":"","first_seen":"2026-02-06T09:12:52.897819Z","last_seen":"2026-02-09T05:59:08.945158Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/f4252d2c8154fd91b7fe.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6fa40ebc3dbeef81167caafc7d9d178","sha1":"8c66988a2dbfd925e8c495c53e50fee22b49e6d3","sha256":"8a1e2bd6c9db638ac147dd77344bc9b8d160c5e2b650737ae87c3dd58e9fae5f","sha512":"422dabaf95c9ca5c1df6e10fcfa6f3522170e5bf2b00352df6aa10f732fcc111c53f4309b714b109fc01994c12ffa9a0be27fb5cdc8b99387e2b42fca52ecd95","ssdeep":"1536:2Q93OqDxMbTE1T151ys3muBUogeM6yQBcV49UPsaD6IgC:j8qmbTE1Tv1wuBRgL6yFMUn","tlshash":"2ac31988f55274b502eb80f8913f6a09b33b5429b02545f4b76deef29e7090e5126fbc","size":126228,"data":"","first_seen":"2026-02-06T09:12:52.910053Z","last_seen":"2026-02-09T05:59:09.021537Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","size":169947,"data":"","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ee97d14f79f076dd925c49276c354d9","sha1":"386685fae2bbf4e890d16407367f7a6a5e03228c","sha256":"e55760f8c3456dd50617d58feb85bf57309032b272c4fe6f85398b3785c0725b","sha512":"0534b35e13e6a2a586981e889588036a4177cc8d04157260cd1afcbd40a8004ecde07c543f6e31954928c5086c75bf37481fb183a34e5d22feaf7f668499c89d","ssdeep":"6144:yE4yh19jkNKyal4PL5ZCn7ozpCfzwEFGhJt7q:z1K2l4PL5ZCn7ocM6","tlshash":"219409e975a1b4f203e391e5843f160fe33b5929741d94a1b722d8d1ac29d8f5223f3a","size":439570,"data":"","first_seen":"2026-02-06T21:49:19.065554Z","last_seen":"2026-02-06T21:49:19.065554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/756671f95f6f3da4646a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"26fb193793347c3409c2ad2ec5ae94d3","sha1":"2ec32b34031032a645fce80b8951ea8bb3fa4d7e","sha256":"28dfd471084830bfcf7725d4d78fd7f13959dc2486439cc1d5c6ae2e0a420a69","sha512":"8cb13d19f9601879ce367a861ef79194bfc46b0706d6ea2b215d179434a375eecbf066a5c7e6b42ddbfbe4710c7f2a0df58cebf3ec3c188ff7ee4ef298d346a7","ssdeep":"192:gw60K7SO2dyacdF+mmFyZ0BUJV0gANkw8iWiN8XNVVSf1Qniuv0bbjLIFTcueIlm:gwHKOOkydF+oVIKiH1yhvADhl","tlshash":"df7209fd7520b0605bdb30b5627f191ff374292e644c84a06706edfa29b491e5193fa8","size":16372,"data":"","first_seen":"2026-02-06T09:12:52.932088Z","last_seen":"2026-02-09T05:59:08.910972Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a62384767a9849709e05aa9d3b79621","sha1":"8199e0e026cdfa25df37c45f7316ac39db452cc9","sha256":"5bed11fcb4417056ace4fcce0e236a2fea1b4fd78dca3ff5d86bb798f5733f82","sha512":"b610477f7ab99329d281acb53425e3f24d9c30f7db0dae8fdaf8627d73d22e67fc92801cf4f12e07d19b019482d6de1593227cf5a1260dfabc8dd04d1b33056f","ssdeep":"","tlshash":"c2c02bcc212e1c7141f727008b3fb600f002331498d0a932480923045d30e07db44854","size":153,"data":"","first_seen":"2026-02-06T21:14:27.886015Z","last_seen":"2026-02-06T21:49:19.095422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f77b4d906d7e978aebf736c7ce339a9","sha1":"d8a276009ebfdcfc6effc2be6928e28c95623406","sha256":"b817a23a2a48d2552cf087858a7e1d2711cec74769fa14367c3922a5ea5c2f83","sha512":"f83b5882773db153e82416b8c12132eaf22150018f0cedc4addeb9b79221a5cf739a2fa26fa09772f732cccd6691b056c1e351e67d3df38409acc4c1ae20c26c","ssdeep":"384:LjNbyZP3IAGckKi+lN88xB+GzBZ/Ye3XHnTApjCXeC4:lodxB+GzzniCXt4","tlshash":"43c2ea6921b700311a67e0b767db56063220d503b646de543e9d83a8afcbe38d8b77cd","size":26479,"data":"","first_seen":"2026-02-06T21:14:27.887645Z","last_seen":"2026-02-06T21:49:19.095954Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ad.gigapub.tech/v1/ad","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"OPTIONS /v1/ad HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,project-id\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type,project-id\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sad.adsgram.ai/js/sad.min.js","fqdn":"sad.adsgram.ai","domain":"adsgram.ai","tld":"ai"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsgram.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 26 Apr 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:DD:A9:A1:4B:7C:17:E2:C1:05:3B:B9:CD:98:D8:CF:A9:9E:56","sha256":"D8:78:70:E0:AE:10:7C:8B:4C:73:57:B7:17:AB:09:8B:16:46:13:1E:29:BC:AE:99:2E:D5:A9:6F:21:48:1A:53"}}},"request":{"raw":"GET /js/sad.min.js HTTP/1.1\r\nHost: sad.adsgram.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript;charset=utf-8\r\nlast-modified: Wed, 04 Feb 2026 16:12:40 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.40.1\r\nx-amz-version-id: xsSQspIthd2_sc7QEMYNhyumy6egSVcN\r\nserver: AmazonS3\r\ndate: Fri, 06 Feb 2026 21:45:55 GMT\r\ncache-control: max-age=600\r\netag: W/\"3841fc6a8657d23daeb0d59162b5f7f1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: dEH86MnfOGv1bAC9klBwNpgfuZsmkUJoUqQCWzNoaNwS_pWCufXnHA==\r\nage: 433\r\ntiming-allow-origin: *\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":181820,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65260), with no line terminators","md5":"3841fc6a8657d23daeb0d59162b5f7f1","sha1":"a746cffecce1ca4972aa42a06fa19398c3097a9a","sha256":"8c294bd83521a7707e3e827b92409555f49eadcbdc308c950c893d7e787ad28b","sha512":"4a03e95371564de10c3cb21029d85c124f888dbb5efaf4e8dbb1409b9ca633e29cb691c259bb1a8d6278e13d7a4d72b330b5c68fdf6dfbcf5fe6afa3c4e73598","ssdeep":"3072:HH2yNUbCsC766XOdtClgCUd6V4BKGT0NJkMKE:jy2sG66edtClnMDKGoCMKE","tlshash":"81045bc8b251f03453a300fa557b450ab3356d56f80a8188f16cedee1eae849a377f79","first_seen":"2026-02-06T21:14:27.814734Z","last_seen":"2026-02-06T21:49:19.064499Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":42,"connect":14,"send":0,"wait":4,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"5.255.255.77","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: i=T20vH5JetDrexj/qja6rajf7RbYwBRsfO0lEHE13wTgZRWSWwKnVJHC+FXN6ivtgTA7+FQ9FxJ9hANrUiB12bTK0Y4w=; Expires=Sun, 06-Feb-2028 21:48:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3809716061770414532; Expires=Sun, 06-Feb-2028 21:48:52 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=5814840411770414532; Path=/; Domain=.yandex.ru; Expires=Sat, 06 Feb 2027 21:48:52 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YMTDmcwGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Mar 2027 21:48:52 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nexpires: Fri, 06 Feb 2026 22:48:52 GMT\r\netag: \"d19eb2865ad7f445e753424d9def054e-1303804\"\r\ncache-control: private, max-age=3600\r\ncontent-encoding: br\r\nx-yandex-req-id: 1770414532396502-8916207536980971606-balancer-l7leveler-kubr-yp-vla-197-BAL\r\nx-content-type-options: nosniff\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":439570,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"1ee97d14f79f076dd925c49276c354d9","sha1":"386685fae2bbf4e890d16407367f7a6a5e03228c","sha256":"e55760f8c3456dd50617d58feb85bf57309032b272c4fe6f85398b3785c0725b","sha512":"0534b35e13e6a2a586981e889588036a4177cc8d04157260cd1afcbd40a8004ecde07c543f6e31954928c5086c75bf37481fb183a34e5d22feaf7f668499c89d","ssdeep":"6144:yE4yh19jkNKyal4PL5ZCn7ozpCfzwEFGhJt7q:z1K2l4PL5ZCn7ocM6","tlshash":"219409e975a1b4f203e391e5843f160fe33b5929741d94a1b722d8d1ac29d8f5223f3a","first_seen":"2026-02-06T21:49:19.065554Z","last_seen":"2026-02-06T21:49:19.065554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":128,"dns":3,"connect":45,"send":0,"wait":56,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/icons/cvcps.png","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /icons/cvcps.png HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 09:50:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1791726\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1791726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3264 x 3264, 8-bit/color RGBA, non-interlaced","md5":"a1effedbeac38d5229f1a4547e6f9a0c","sha1":"b2f4d544e455d0d694bc80c36a130d29e625de73","sha256":"2c38515b4fb4823754fbd0d4b3341d1cd042bfdccc345f8c3b872004afa96843","sha512":"ac4f594d12a38a46162a314733aea9d2b3e9fa92d423ab7aa5654744bf30d3144869379893bd21350b0d852fcd0d7468e266f918650f6d2930120a5b24d53add","ssdeep":"24576:Bs1qXpsVm0lGThYrDaOvXuVlGLCVvi3VCW+xnGZ46:BfXWVm0lGTG3a6XCSCVK3YGZX","tlshash":"b325235faaaf68b2d30a907219751f7badd3532423386a36c733f182c8cb25a45553d8","first_seen":"2026-02-06T21:14:27.866759Z","last_seen":"2026-02-06T21:49:19.066767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1921,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/icons/swap.png","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /icons/swap.png HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 03 Dec 2025 08:22:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5875\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"59507c0d0909bb3205d8d09980003ad0","sha1":"3e7372736353c97909911890dc0317110ba1d6e0","sha256":"e43149101a64e313aba42338a807cec5d2e22e04e69d83e2f08faadfb79586c9","sha512":"1c49179c21a405a7989454167ad20a1d8f13146c681788ecda0c2ef0f59f938889a0afee38decbfa4ae67a7ebfcb9f57033040dac38d2233416390094596dbbd","ssdeep":"96:LpSD8ELMnv5SQ8IiEZB++lzkoZGwRD3W23tgh4l+g7PqAzT:VKMvUQ8a+ckeGI3FdgqwaT","tlshash":"02c19da2f08a168ae737ce3df4ac0055480b011500aaf61deb0aa578fe785de04e69ad","first_seen":"2026-02-06T21:14:27.85809Z","last_seen":"2026-02-06T21:49:19.067448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"munqu.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:14:58 GMT","end":"Thu, 09 Apr 2026 05:14:57 GMT"},"fingerprint":{"sha1":"6A:99:F1:85:CC:D8:22:79:6F:D0:DD:FE:5C:D1:95:32:2F:E2:B7:16","sha256":"B9:B5:49:57:04:3B:FB:AA:EE:33:D0:37:88:81:75:D6:74:67:6B:60:A6:35:35:36:2F:1E:EE:BD:62:DE:1E:65"}}},"request":{"raw":"GET /sdk.js HTTP/1.1\r\nHost: munqu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=86400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":73,"dns":19,"connect":26,"send":0,"wait":51,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:26 GMT","end":"Mon, 13 Apr 2026 08:38:25 GMT"},"fingerprint":{"sha1":"DF:42:37:13:35:8D:A4:42:F4:81:DF:D2:AF:04:C4:6D:23:27:5D:0B","sha256":"01:14:5B:59:48:97:DF:81:4B:BE:59:0B:AC:32:B6:15:AD:CE:47:D9:53:36:4E:AD:6E:7B:D0:45:0B:F3:10:96"}}},"request":{"raw":"GET /css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Feb 2026 21:48:50 GMT\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30aa85be1a9075811c7e1d9af8f2aec4","sha1":"a29203b6128dad12843dd835ca97f3f03b2340b6","sha256":"e0cee71a7f5e6dd45b48fde490bfbf69a410226921a3a47741cbdba45de9a02b","sha512":"351cd7e1930577ce72d5eda491ead03cab5e0a066ea45f59ea4a8978efbe96354b585a9cb4258186299f46b3c55a157c7dfca87fed83233c37dfb4abce472c5e","ssdeep":"384:UZkqhg0hcky4j/3Ak9Cv5sokFa3hZ2aJl:B","tlshash":"bb72cfd3145b9400ea434dc223cbbf36de8f65956045c5b9abfe18c4ace6d3a0369b4d","first_seen":"2025-09-02T19:36:20.027794Z","last_seen":"2026-06-13T19:08:33.92004Z","times_seen":1899,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":126,"dns":4,"connect":21,"send":0,"wait":33,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrcodejs/qrcode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/qrcodejs/qrcode.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.0.0\r\nx-jsd-version-type: version\r\netag: W/\"4dd7-LQbB+CPzTBmYHGrgsOsPWGHF4Us\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 19711\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nx-served-by: cache-fra-eddf8230119-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-06-13T18:31:19.802279Z","times_seen":62018,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":105,"dns":1,"connect":40,"send":0,"wait":29,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/html5-qrcode","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /html5-qrcode HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 54\r\ncf-ray: 9c9ddaa17a7f5687-OSL\r\nlocation: /html5-qrcode@2.3.8/html5-qrcode.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375364,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/script/giga.bid.release.v31.js","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.giga.pub","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:31:29 GMT","end":"Fri, 01 May 2026 11:31:28 GMT"},"fingerprint":{"sha1":"96:91:60:11:73:D8:51:20:4A:5E:B6:A2:EC:4B:A2:8C:9E:EC:54:72","sha256":"8A:B2:FF:10:81:CE:CB:8D:25:52:2B:AF:6A:19:A5:2C:01:81:67:18:EC:C3:5B:DA:B1:6E:EE:4D:3C:CB:0B:B6"}}},"request":{"raw":"GET /script/giga.bid.release.v31.js HTTP/1.1\r\nHost: cdn.giga.pub\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 106383\r\nx-id-fe: sto5-hw-edge-gc15\r\ntraceparent: 00-e7c7603cde39cc90769d227ceb1c8232-7ebffb9ba48e2e98-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 15 Jan 2026 08:34:40 GMT\r\netag: \"6968a6a0-19f8f\"\r\nx-id: sto5-hw-edge-gc15\r\nage: 219992\r\ncache: HIT\r\nx-cached-since: 2026-02-04T08:42:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65523)","md5":"32f08aa55c5f3df00f878106a00fd310","sha1":"97608a5d89cd8d25eb397097b2183e1d10dbd43c","sha256":"2b325a8f38935cd3b375b021459ba0b8b98b250894565e959167b6c11896cb51","sha512":"4aa6f971eff1720a4e267ffab3c826ed3c54a52916c55cf13a56fdaf03442c11a2dbcf9996d469c33454a529944b24ac63d7fa61c6ed3e5d21c15ef11846314f","ssdeep":"1536:qD337Y2qQ14NweYUdLdPdeyfOjobyO67GWlco9UHw:qDnk2qQ1kneyGjdNou","tlshash":"0ca30e9c7f01e62d958596ff2b384489d8011f09bdcc47ddf799f826e5a8227a87c30a","first_seen":"2026-02-06T21:14:27.811599Z","last_seen":"2026-05-16T04:06:49.723302Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/init","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"OPTIONS /v1/init HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@tonconnect/ui@latest/dist/tonconnect-ui.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@tonconnect/ui@latest/dist/tonconnect-ui.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 62\r\ncf-ray: 9c9ddaa17a795687-OSL\r\nlocation: /@tonconnect/ui@2.4.1/dist/tonconnect-ui.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":531,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.adexium.tech/assets/js/adexium-widget.min.js","fqdn":"cdn.adexium.tech","domain":"adexium.tech","tld":"tech"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.adexium.tech","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 14:05:46 GMT","end":"Thu, 23 Apr 2026 14:05:45 GMT"},"fingerprint":{"sha1":"D2:8D:89:98:CE:BD:03:A9:9D:F3:79:BD:3F:23:81:AC:B8:27:47:93","sha256":"24:5F:1E:74:75:45:F8:C8:1A:77:80:75:BE:EE:2C:BF:B7:29:97:4D:B6:13:D8:FE:C4:63:CA:5C:94:AD:D0:A2"}}},"request":{"raw":"GET /assets/js/adexium-widget.min.js HTTP/1.1\r\nHost: cdn.adexium.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3203764\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=180\r\ncontent-encoding: br\r\netag: \"69861851-a47c\"\r\nlast-modified: Fri, 06 Feb 2026 16:35:29 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 1019\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/06/2026 16:42:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3c09598ecb296a39218c7bc013260e11\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":42108,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42008), with no line terminators","md5":"3546afbd3c66b3406fa77fbe32182a37","sha1":"37fb93561c1cd5aaafff9498a1e711baccd2e805","sha256":"3be7108c1c053b8a43bd5a20b39bdbb1c28482b2c850aa8b2884a5ec038286d8","sha512":"ba3238df1a87c8cdeb9c5586b092076048abfb5557faafb80e89a9fc50ecf81f2bcbd1d90b03f12188b0c480bb0d19dd5cd99b7fb41b32f35cd1308eabfe6858","ssdeep":"768:AIJqHM/x7SU/gsCuUgYqKTWwVn/ObjspUXyyVJGajT9SDdY1wmevQnAiB6c9/vjm:rJH/x7eNucqMFgsm3uXleRYm54","tlshash":"4d13b4a1e668e27c9f6e44db05304420e97e1f40305d6eb8b0bde56e3ed5b83a73d1a4","first_seen":"2026-02-06T21:14:27.83349Z","last_seen":"2026-02-06T21:49:19.070496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":67,"dns":68,"connect":1,"send":0,"wait":5,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/756671f95f6f3da4646a.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/756671f95f6f3da4646a.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5749\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\netag: \"7175ef4e0f599188dc8820bdb3824724\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Thu, 05 Feb 2026 17:10:54 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Mon, 07 Feb 2056 04:19:55 GMT\r\nx-strm-log-split: 1\r\nx-request-id: d5e2a244d9b851b6\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16372,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16338)","md5":"26fb193793347c3409c2ad2ec5ae94d3","sha1":"2ec32b34031032a645fce80b8951ea8bb3fa4d7e","sha256":"28dfd471084830bfcf7725d4d78fd7f13959dc2486439cc1d5c6ae2e0a420a69","sha512":"8cb13d19f9601879ce367a861ef79194bfc46b0706d6ea2b215d179434a375eecbf066a5c7e6b42ddbfbe4710c7f2a0df58cebf3ec3c188ff7ee4ef298d346a7","ssdeep":"192:gw60K7SO2dyacdF+mmFyZ0BUJV0gANkw8iWiN8XNVVSf1Qniuv0bbjLIFTcueIlm:gwHKOOkydF+oVIKiH1yhvADhl","tlshash":"df7209fd7520b0605bdb30b5627f191ff374292e644c84a06706edfa29b491e5193fa8","first_seen":"2026-02-06T09:12:52.932088Z","last_seen":"2026-02-09T05:59:08.910972Z","times_seen":157,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":61,"dns":1,"connect":14,"send":0,"wait":14,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/29dc65efb02411e33e58.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/29dc65efb02411e33e58.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1422\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\netag: \"e3346b4cdd1e29263b6023cb6bd44fee\"\r\nexpires: Mon, 07 Feb 2056 03:49:53 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\nlast-modified: Thu, 05 Feb 2026 17:10:53 GMT\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 0\r\nx-request-id: d4c6bad6463edd7e\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7161,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7118)","md5":"77ee015fe09acec232b4fe478176ee85","sha1":"2d03fcf9c2342bd234aeed80e9dbde61eae9d311","sha256":"7105dd55a0ba6142dadf9e8f83bfa58b75e81c5ac95104ca53fb852c230e9f5d","sha512":"097881ebd3368d6297a959b096d297bae15ee5d86a3ab2b71ab5dc65e9fb00c7dc346267885556fa4b246f9da61d2ec290e1ce99fd04585b7910651ac033a94e","ssdeep":"96:zT6C4xYdDWcDSfjmPOxw4BoL8QzZQ5E+HASp6MH:zTndSOOxK8QIE5MH","tlshash":"75e1aa5a788134b31b2360fd566fdacc24f76651ace6b7912a94cff2cc7b60e4142b18","first_seen":"2026-02-06T09:12:52.897819Z","last_seen":"2026-02-09T05:59:08.945158Z","times_seen":157,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":70,"dns":1,"connect":29,"send":0,"wait":15,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=82cc22a0-5709-44e8-a173-234eedee4e46","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=82cc22a0-5709-44e8-a173-234eedee4e46 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 805\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":805,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bPZ]XF\fXX\u0015\u0015\u0011W\u001e\u0012\u001c\u001a\u0001\u000bK\f\u000bf\b\u000eLQP\u0016BOTX^F\u001b\r\u001e\u0006*\u000b\\KC\u001bCFL\b\u0007G\u001a\u0002ZfZR%U[RW\u0012M\u001a\u0011R\b\u0004LGPW\u001b\u001eCV^i\u0013\u0000\u0026ZWX\u001aKU\u001b\u0002\u0006\u0007\b\u0019k\u0007\t\u0015\u0003\u0011X\u0011\nAZX\b@\u0019\u0013\n\u0005\u001cZ\u000e\u0011ZLA\u0015Z\\E\u000eFCJWN\u001a\u0004\u001cM\t\u0005\nIH\u0016\r\fTQV\u001b\u0010\u0017T\u001c\u0014\u0005\u001aE[K\u003e\u001f\u0007\u000fP\u000eLU\u0005ZP\u0004H\u0005IE@U\bPT\rU\u000fVF\u0013\u0005Y^\u001a\u000b\u0000\u0002\u001f\u0001\u001d\r\u0010V]]O\u001bMH\u0001\n-]\nO\r\u001b\u0003\u000eJV\u001d]\u0017\u0001\u000e\u000b\u001b\u000eUR\r[\u0014\u0005XYS\f\u0007R\u001e\u0000H\rLR\u000f\u000b[\u0015C\u000b\n\u000f\u001b@\u0007\u0002YX_i\u0013\u0000\nJO9CK\u001aU\b\u000f\u0000\u001f-]\nO\r\u001b\u0002R\u0018]H^L\u0004\u0015PI_UGZ\t@PC\u000f\u0002\b\u0004\u001b\u0018\u0007M_\u0014\u0003ZX@ZP\fLGPU\b\u000b^UZW\u000e\u0001\u0026\u0001\u0011@\u0002K[\u0015C\u001e\u001c\n\u0014R\u0007\u000ehJ\\C\b\u0007\u001c7\u001c\u0006\u001aS[\bQXV^E\u0006XO\u001b\u001bRR\f\u0001\u000b\u001c\u001c\u0011]\u001b\u0026P\u0005HTIP\u0018L\u000eVTCW\u0013\u0003\u00177\u001c\u0006\u001aS[\u001bMH\r\u001e\u0001@\u0001\u0000hPWiKFCJ\u0005\u0017K\u0001\u0012P\u000fHBI\u0011A\u001d\u0019XTl_\u001e;KJO@\u001aE[Z\r\u0003\r\u0000-]\nO\r\u001b\u0007C\u000e\rLE@TO\u0019\u001eX\b\u000bX\f\u0013\u0016BOTV@BX^[JY@U\f\rQ\u000e\u000eLQPW\u000f\u000e_\\\u001e\\\tI\r\t\u0012@\u0014K\u000bf\u0014\u0003\nIH\u0016\\\b\u0003X\u0007WKQT\t\u0013[\fDM\f\u0007[C\nJ\u0001V@\u0005\f\u0005\u000e\u0018Q\u001a\tDS]\u000f[\u0015C\u0005\u000f4\u001bPLW\u0015\t\u000b\u0006H\u0000L\n\u0016TZ\u000bN\rY\t^\rC\u0002Z\t\u0002\rWR\u001eU\u001cQEUZKU\u001b\u0000\u000e\n\u0002\u0006]\u0001\u0003VUl_\u001e\u0017[R.?E4\u0004"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Fri, 06 Feb 2026 21:48:53 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.app.cvcplayspin.xyz\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":91,"dns":1,"connect":26,"send":0,"wait":26,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/icons/dropdown.png","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /icons/dropdown.png HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 10:01:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 700\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"824f4328ad699ab3e562f14c4dbae991","sha1":"54e0e008ef7696baf2548435f431c61f523c14fe","sha256":"898d901509ad8be0746a66a3601684e5ccd166ba76b61290cb8e7897860524bc","sha512":"8a7eb9783f2d7028e88bf40d6764569d6827efbc03cc6973cd6ef8feddad80c09ea05a920367ae84d497cd36def1a3b87a2f4c265c6134987b612cf29011e462","ssdeep":"","tlshash":"b00123d1fa98d127db191ddc243393d22c627177ea1b7ce812d9f12c5230651088a7cd","first_seen":"2026-02-06T21:14:27.829322Z","last_seen":"2026-02-06T21:49:19.072167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:51 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9c9ddaa7dd770afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a2596f80ae6afe01326d89ff624ae34","sha1":"91f050a726f0c0f04eec901451c13bc717367797","sha256":"720ebad2b2521f6bd393402da5e97cb08e7927ff1e3e8e65b4dab1365302297a","sha512":"6c52f88a3238b6f66c6a6b618ee19641c6c22cacc0f54b15d72ac0f3d776cea9c338302930d625df7058b00282ff00bde972957dac8c6f253aa1faac4c495079","ssdeep":"","tlshash":"fda0024304586fc892a91d1e2bcb9a854151a195ba1bd24541d6c00221c794e4f4d781","first_seen":"2026-02-06T21:49:19.072708Z","last_seen":"2026-02-06T21:49:19.072708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":43,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nx-nginx-request-id: 4d2ad3e077d109cd\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\ncache-control: public, max-age=31556952\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nvary: Accept-Encoding\r\nexpires: Sun, 07 Feb 2027 03:23:06 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nx-strm-log-split: 8\r\nx-request-id: 0bb7f042870036a4\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-06-13T19:04:10.995547Z","times_seen":27151,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":57,"dns":1,"connect":13,"send":0,"wait":15,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.167.71","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 03:02:30 GMT","end":"Thu, 30 Apr 2026 03:02:29 GMT"},"fingerprint":{"sha1":"89:BE:39:86:01:62:94:0A:25:31:1D:1C:14:E5:F6:63:AC:8A:94:AD","sha256":"E7:AF:6C:73:E3:A0:5B:4A:0B:A4:38:3F:9C:3D:99:5E:80:6D:F4:48:E8:66:B0:19:34:C1:D4:0F:CA:15:C1:B5"}}},"request":{"raw":"OPTIONS /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":76,"dns":5,"connect":21,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10334865?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"OPTIONS /500/10334865?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/v2/intCfg","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"POST /v2/intCfg HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nproject-id: 4669\r\nuser-id: -1\r\nAuthorization: Bearer CEEUHXgZVL184wyaDp6laEchjHQ7RNN3\r\nContent-Length: 11\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11,"data":"{\"args\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 732\r\netag: W/\"2dc-u39MAG4LWLxIGxwx2ZT6FrNeXjA\"\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":732,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b89586df6764ff9f8d65a7df214456e","sha1":"bb7f4c006e0b58bc481b1c31d994fa16b35e5e30","sha256":"c0e63a561878a304fdf59eff3840a946bec12fe6c6ffcce03784f77abed10913","sha512":"cacbfaacdb0baac1458fb253971ca27edc137618aa8efba5112ca7f05f13cb652cc905b7eccacc9e68d10796e3fecc3ce2d14510d290a48aa865167a4bf028ae","ssdeep":"","tlshash":"6001105915099308bd20e5baba322568f0da48c4b98b7258ef1db485c06be447f8d440","first_seen":"2026-02-06T21:14:27.864838Z","last_seen":"2026-02-06T21:49:19.074096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/v1/ad","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"POST /v1/ad HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nproject-id: 4669\r\nAuthorization: Bearer CEEUHXgZVL184wyaDp6laEchjHQ7RNN3\r\nContent-Length: 170\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":170,"data":"{\"method\":\"init\",\"args\":{\"user\":{\"user\":{\"id\":-1,\"vip\":0,\"language_code\":\"*\"},\"platform\":\"unknown\",\"version\":\"0.0.0\",\"start_param\":null},\"version\":\"v78\",\"seconds\":5.067}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-13T18:29:52.312365Z","times_seen":709561,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/icons/calender.webp","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /icons/calender.webp HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Feb 2026 21:48:51 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 26 Nov 2025 05:39:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88826\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7165ad564a1ee0357a2f72bd3884c7d4","sha1":"082244a16982c1af4a1800b3ff89f298d312c85d","sha256":"6aad80ddcb7ee89af6accbac6d170ebb1ac0c691d2c3cc69cb8bf77c63304ce6","sha512":"7753a87f3a28e3f7aeaa4af5e44d9b6da1ed94996d2acfd80da56261b391154e3c7b50be5ffe67f159c0dcf86fb5be0d58ca177efcfa84002dd758f5ce792b37","ssdeep":"1536:IwfqE3fI+wGrMQPjv3oXvdkIgZU3RWAGgdwex+s7uHbzCNjkK5+zW4HIAQuvvw2p:IkN3fz4QPUX1kBZWgg+en7uijko+AAQc","tlshash":"0d9312c9443a58f86176b61e73ba332dbd85ed564c94890b82573faef00b727f044d61","first_seen":"2026-02-06T21:14:27.870717Z","last_seen":"2026-02-06T21:49:19.075187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1252,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c9ddaa2e8df7131-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1956526\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:51 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-06-13T13:35:55.835915Z","times_seen":4403,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/loader.js?t=1","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"GET /loader.js?t=1 HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=86400, immutable\r\netag: \"KGZ1bmN0\"\r\nvary: Accept-Encoding\r\ncontent-length: 1183\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e7b4428d10446f993b31948e01298774","sha1":"deaeb95e9334f095b25012388b5ce27a8a14efc1","sha256":"ec95cd5c6fd449c09902fad0c1af33e0d76c30866986fed52ebbda352fc640ca","sha512":"46257eb835447567da74fff276909537512e3e10789e51feb472f10baaef0bda4d20d84c0fd4cab1fa0c43307928033061af39cd3bd4658891791c8a060d0f60","ssdeep":"","tlshash":"4d21045e28af9230016371ee173fbbc4f197502744a0c8487ecd96903f22a1bc401b98","first_seen":"2026-02-06T21:14:27.804449Z","last_seen":"2026-05-16T04:06:49.721911Z","times_seen":4,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":108,"dns":59,"connect":26,"send":0,"wait":30,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/loader.js?t=1","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"GET /loader.js?t=1 HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=86400, immutable\r\netag: \"KGZ1bmN0\"\r\nvary: Accept-Encoding\r\ncontent-length: 1183\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1183,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e7b4428d10446f993b31948e01298774","sha1":"deaeb95e9334f095b25012388b5ce27a8a14efc1","sha256":"ec95cd5c6fd449c09902fad0c1af33e0d76c30866986fed52ebbda352fc640ca","sha512":"46257eb835447567da74fff276909537512e3e10789e51feb472f10baaef0bda4d20d84c0fd4cab1fa0c43307928033061af39cd3bd4658891791c8a060d0f60","ssdeep":"","tlshash":"4d21045e28af9230016371ee173fbbc4f197502744a0c8487ecd96903f22a1bc401b98","first_seen":"2026-02-06T21:14:27.804449Z","last_seen":"2026-05-16T04:06:49.721911Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/init","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"OPTIONS /v1/init HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Tue, 10 Feb 2026 21:48:51 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-05-12T02:27:32.127067Z","times_seen":3808,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":268,"dns":1,"connect":29,"send":0,"wait":48,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.18\r\nx-jsd-version-type: version\r\netag: W/\"13811-tfHjd44Cw1KIdX3p1sYQR+wbKBw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nage: 27039\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79889,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48901)","md5":"5ccdb5c90ca32266cf2f0dbc529a4d0a","sha1":"b5f1e3778e02c35288757de9d6c61047ec1b281c","sha256":"17c9c1105a89db5665e481ebe28fdb9367bd3f60932ba946d691cd4f63fe6e86","sha512":"c74cbfed78cd5a07d1ffe8fbb19e1954eed654aef214c9bb7c4cb1080014355da3af09c071b904e8a1dbc885d245197a403b068d3537d0168f4eb53cdd6df460","ssdeep":"1536:Jwk6ey/PIZHo+DqA55l6DbJZ8VUbzIYbRd:Ae2Iqol6Dbn8gIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2026-02-03T04:25:08.402639Z","last_seen":"2026-05-16T03:25:17.333694Z","times_seen":576,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":119,"dns":1,"connect":17,"send":0,"wait":27,"receive":10,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/script?id=4669","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"GET /script?id=4669 HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 57242\r\netag: W/\"df9a-pNxROYVVvhifqppUWUKUVy1HsjY\"\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":57242,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57168)","md5":"b2e3934ffda584a08df72fc71905aa63","sha1":"a4dc51398555be189faa9a54594294572d47b236","sha256":"d0a2218fb2ff645cd13866a1407c6b23a473fb4e5b7c1ad1b09e75f211803208","sha512":"05d5f2b3f1afc6a00bc143c3e05a622c6721b286ed79a98fe74dd0e40dc3138a46f5edee2c9def7f17e49a840dabaaef473aea603e84445067eaba10cb9e80dc","ssdeep":"768:3IfSLX6ug6d0cpRrD8sglM7jagaByi13519Q+XjV34ko6YqiQaZGJaF6QEQNOku0:hLNWRBXxkUKEHnrB0j","tlshash":"a443d5546f65e23f479898b742324141c2590e8df68cdbdef3bee8016998712ba7d338","first_seen":"2026-02-06T21:14:27.856583Z","last_seen":"2026-02-06T21:49:19.078021Z","times_seen":2,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":56,"receive":50,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tgads.space/assets/js/adexium-widget.min.js","fqdn":"cdn.tgads.space","domain":"tgads.space","tld":"space"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tgads.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 02:02:23 GMT","end":"Mon, 13 Apr 2026 02:02:22 GMT"},"fingerprint":{"sha1":"26:E7:1A:DE:6B:F9:B1:3E:A7:94:C5:45:FC:D3:9E:3E:DF:44:62:9F","sha256":"F0:52:74:5E:B8:0A:86:19:23:D2:62:73:91:B8:5B:DC:9E:EE:43:22:A9:98:A6:48:93:E3:91:4B:09:B7:9C:CA"}}},"request":{"raw":"GET /assets/js/adexium-widget.min.js HTTP/1.1\r\nHost: cdn.tgads.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3203764\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=180\r\ncontent-encoding: br\r\netag: \"69861851-a47c\"\r\nlast-modified: Fri, 06 Feb 2026 16:35:29 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 1019\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/06/2026 16:42:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9d15b187ceb35f1108a290ed5dbc0501\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":42108,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42008), with no line terminators","md5":"3546afbd3c66b3406fa77fbe32182a37","sha1":"37fb93561c1cd5aaafff9498a1e711baccd2e805","sha256":"3be7108c1c053b8a43bd5a20b39bdbb1c28482b2c850aa8b2884a5ec038286d8","sha512":"ba3238df1a87c8cdeb9c5586b092076048abfb5557faafb80e89a9fc50ecf81f2bcbd1d90b03f12188b0c480bb0d19dd5cd99b7fb41b32f35cd1308eabfe6858","ssdeep":"768:AIJqHM/x7SU/gsCuUgYqKTWwVn/ObjspUXyyVJGajT9SDdY1wmevQnAiB6c9/vjm:rJH/x7eNucqMFgsm3uXleRYm54","tlshash":"4d13b4a1e668e27c9f6e44db05304420e97e1f40305d6eb8b0bde56e3ed5b83a73d1a4","first_seen":"2026-02-06T21:14:27.83349Z","last_seen":"2026-02-06T21:49:19.070496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":48,"connect":4,"send":0,"wait":1,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/105bd0c50559d82f5048.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/105bd0c50559d82f5048.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 136697\r\nlast-modified: Thu, 05 Feb 2026 17:10:53 GMT\r\netag: \"5e0ea03ed12375a0871b46a6da8be197\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nexpires: Mon, 07 Feb 2056 04:19:55 GMT\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\nx-strm-log-split: 0\r\nx-request-id: f82df9c222d8edfd\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714265,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"72cab3ed33cdc767d122267c1f1aa111","sha1":"4f1c872ba47a25ce2ef8e679d615d5807b9c76f0","sha256":"74a28a0e1d8356f13dec5458c05b0e78da92409109e6dae1b59d9447098bc6f3","sha512":"b722707414d81b1e9e1afbd6507335418ab4368e3841a9c8a01cab35b1ada092f715b5966f913261d64ddb5991ac446da946e9ba3727e9a7816f4d8638e845cb","ssdeep":"12288:QnzBu9/dCvKl9YmLIKhg4LhIIB+WjnHhBPOjLInhB/YGxph:n/ovKl9YmLIKhg4qW+WjnHhBPOjLyxxf","tlshash":"88e4f8d9fa5170b542e794e9c03f160ea23f7519700980e4b766ece26c78a8e6123f7d","first_seen":"2026-02-06T09:12:52.934073Z","last_seen":"2026-02-09T05:59:08.979135Z","times_seen":157,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":91,"dns":1,"connect":14,"send":0,"wait":14,"receive":19,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/8e4b5a92408827a5e9f8.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/8e4b5a92408827a5e9f8.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5041\r\nlast-modified: Thu, 05 Feb 2026 17:10:54 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nexpires: Mon, 07 Feb 2056 04:19:54 GMT\r\naccess-control-allow-origin: *\r\netag: \"6112428656f677fb683546d04721f9e7\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nx-strm-log-split: 5\r\nx-request-id: ab6a253cb15d727e\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14938,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14904)","md5":"137e42995456ee1580f6191c829d94b4","sha1":"378337eb6e0971d67010bd9c2b90f749f314942d","sha256":"72fde0e6d26ff1f439423de749619785364f93e55cd8916154e130bfe9ffabab","sha512":"1f7b7171c4b58ea19200c8ae7cd7bc93ce1bc7ac51ab6bccb170bb4678916cc1d8d0d0676ee8b64ec6536a5ba4e05d5ed1c102c0e32109a0dfbc49a70d9d9772","ssdeep":"192:UwAHIp52spjlpQ7YX0lQsm+24q2BTXV3UGUPLe7trH/clY9u4FdHN3vgfye/K19I:Uwpz2+lpQMXZ+2l2BTYPVlY9P6fyH4R","tlshash":"a762e79974d5b4a513db20bb413f150ff3ba6879684d80a0f222d8e97ef885c8167f6c","first_seen":"2026-02-06T09:12:52.9539Z","last_seen":"2026-02-09T05:59:09.035503Z","times_seen":157,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/f4252d2c8154fd91b7fe.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/f4252d2c8154fd91b7fe.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 24813\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nexpires: Mon, 07 Feb 2056 04:19:54 GMT\r\nlast-modified: Thu, 05 Feb 2026 17:10:54 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"fb1162ab2085ba266b403397b255a058\"\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 9\r\nx-request-id: adecdf48a67eeda0\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126228,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65505)","md5":"a6fa40ebc3dbeef81167caafc7d9d178","sha1":"8c66988a2dbfd925e8c495c53e50fee22b49e6d3","sha256":"8a1e2bd6c9db638ac147dd77344bc9b8d160c5e2b650737ae87c3dd58e9fae5f","sha512":"422dabaf95c9ca5c1df6e10fcfa6f3522170e5bf2b00352df6aa10f732fcc111c53f4309b714b109fc01994c12ffa9a0be27fb5cdc8b99387e2b42fca52ecd95","ssdeep":"1536:2Q93OqDxMbTE1T151ys3muBUogeM6yQBcV49UPsaD6IgC:j8qmbTE1Tv1wuBRgL6yFMUn","tlshash":"2ac31988f55274b502eb80f8913f6a09b33b5429b02545f4b76deef29e7090e5126fbc","first_seen":"2026-02-06T09:12:52.910053Z","last_seen":"2026-02-09T05:59:09.021537Z","times_seen":157,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maucn.netdeliveryservice.com/in/dip?event_id=de6997b2-0d9a-48d4-a14a-ef05cf016efc","fqdn":"maucn.netdeliveryservice.com","domain":"netdeliveryservice.com","tld":"com"},"ip":{"addr":"195.201.185.32","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 02:22:49 GMT","end":"Thu, 16 Apr 2026 02:22:48 GMT"},"fingerprint":{"sha1":"18:80:7D:16:42:BF:F5:42:07:6F:8F:D7:B9:76:B8:D9:2B:55:62:9A","sha256":"02:11:05:C0:04:BA:72:63:FC:74:B7:59:84:A3:27:78:54:46:4C:7D:48:78:38:D4:79:7F:46:21:0F:76:FF:A2"}}},"request":{"raw":"GET /in/dip?event_id=de6997b2-0d9a-48d4-a14a-ef05cf016efc HTTP/1.1\r\nHost: maucn.netdeliveryservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":72,"dns":13,"connect":25,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T21:48:49.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.28\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nserver: LiteSpeed\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP:8.3.28","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":43728,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"814284fbd51f3e432bfdfa065163f3ba","sha1":"f729509294f2ed22fd99624237fc3cb14fb37006","sha256":"47c05dfc062ef46e728d9db132abd57ced83fe199ecfffd356eddf5842190d32","sha512":"13e6ffc7f526ec95b19321e53f6930857d4db40a55713514f01da30d800c452a31c8c37e2afedfd0c809359ff792bd3b1b93341e04afdaadd6670f428a15f6ba","ssdeep":"384:r9z9g/1IksC/6ty/OOZUFVHzpwfgOJnDa1FvNW/dSN/EeJ8JmDRjFqZ2VfNH+K9v:r9z9g/1IkxCtYOOZUhw0VJ8gD7k08gpH","tlshash":"8013b524a15600216673d3a6afa34b4efb619103d342d2583fec92599fb6d68c963fcc","first_seen":"2026-02-06T21:14:27.873595Z","last_seen":"2026-02-06T21:49:19.080034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":636,"dns":2,"connect":313,"send":0,"wait":318,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.onclckvd.com/in-stream-ad-admanager/tma.js","fqdn":"js.onclckvd.com","domain":"onclckvd.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.onclckvd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 02:32:48 GMT","end":"Mon, 16 Mar 2026 02:32:47 GMT"},"fingerprint":{"sha1":"F7:20:6D:C6:09:53:42:60:37:C7:DF:C6:4F:8E:F6:E3:12:5E:FC:AC","sha256":"E3:05:06:20:80:96:94:E7:E7:45:93:94:B6:6C:C4:FC:A2:B1:E9:20:EC:EC:65:45:A5:FF:B6:90:01:E9:D2:CF"}}},"request":{"raw":"GET /in-stream-ad-admanager/tma.js HTTP/1.1\r\nHost: js.onclckvd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 30 Jan 2026 09:41:23 GMT\r\netag: W/\"697c7cc3-51d46\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 06 Feb 2026 21:53:51 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: DS8137\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"82a81febb7719ba7fce8253dc5eb29d2","sha1":"3585fd3f733f4a4a345c4761126870d19f0fac16","sha256":"5df51c23e67bdec873efd12a59cd1cd8baffe0e685881732508fc7f430bdbd86","sha512":"6ed1563b6178affbaedf7997ef24c2c86df4c71310c14f881d3b242ff7f32cfc0a61aef42add212bdcd87ba142d78141c211ff377378e53096dd77dc58b4633b","ssdeep":"6144:4rxAsc/iLH9F8sAvooiPQCCu2onfI2BvMUcno2zqOPEJ4eno2zq6Uo:+caLH9F8sAvooiPQCCu2onfI2BUGOM4u","tlshash":"8a64299c72c2f07543e361b5803f110af33a2959a80d5460f669d9d6beb8d8a8237f7d","first_seen":"2026-02-06T21:14:27.827019Z","last_seen":"2026-02-06T21:49:19.080517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":221,"dns":25,"connect":100,"send":0,"wait":115,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/favicon.ico","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: _ga_MRZLZCTDFE=GS2.1.s1770414531$o1$g0$t1770414531$j60$l0$h0; _ga=GA1.1.499695001.1770414532\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T18:35:27.754442Z","times_seen":133535,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 06:54:37 GMT","end":"Thu, 09 Apr 2026 07:52:20 GMT"},"fingerprint":{"sha1":"2A:26:DB:3B:39:FD:D5:A2:0F:EC:F9:DF:F3:2C:3C:B3:E7:09:E5:7A","sha256":"9C:98:41:13:1C:AB:70:56:79:E3:FA:CA:AA:ED:48:B7:7F:3D:D1:ED:9E:25:5D:E8:10:31:D0:A2:A8:4F:4C:1C"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsW3%2B7GF%2B7NyKlKiPJ%2Bli7JXguRJvYS5tf2U4g6XlccAk1vO4Lte4PPD7PpEtR5oEC4pXrPgykhjqXtOxhyHjaFgkWF61Lc5SA%3D%3D\"}]}\r\nage: 4016\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9c9ddab3199556b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-06-13T18:28:49.688071Z","times_seen":7045,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":23,"dns":4,"connect":1,"send":0,"wait":8,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10285726?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"GET /500/10285726?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: OAID=x1ne938643em451348522u0b2khrz825\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 841046d5ea12a4541af5ec10ad2ceaee\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:54 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15295,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"aec96abb534a1a18fe186c7412f7171f","sha1":"4c488f2392487d491d5b87d41548bb01bdaffdb3","sha256":"4cad6b08f62319a818fb21b8be4f5af379d4aae1fd6d193d2b87eddb10f4083e","sha512":"a554d7dce4f7dc6ffeb15e33ac2da370474e64313420b74a0a048734be2b1b9817abd77fb25aaf164d22ae3f473c053505860f4424efcaf1eb2f67c70af00629","ssdeep":"384:Jm2OaW2UgmsHyGZpeKf3LjD+7Xn+9k3kZcW:J35W2UgmmyGZcKPLjD+7Xnyk32cW","tlshash":"c962d7dd3780c406d4c35e1c6b721e3abcdf1d094ff558cc765af62542ae0b809ea68a","first_seen":"2026-02-06T21:49:19.081938Z","last_seen":"2026-02-06T21:49:19.081938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/pxl.iframe/","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.giga.pub","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:31:29 GMT","end":"Fri, 01 May 2026 11:31:28 GMT"},"fingerprint":{"sha1":"96:91:60:11:73:D8:51:20:4A:5E:B6:A2:EC:4B:A2:8C:9E:EC:54:72","sha256":"8A:B2:FF:10:81:CE:CB:8D:25:52:2B:AF:6A:19:A5:2C:01:81:67:18:EC:C3:5B:DA:B1:6E:EE:4D:3C:CB:0B:B6"}}},"request":{"raw":"GET /pxl.iframe/ HTTP/1.1\r\nHost: cdn.giga.pub\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\ncontent-type: text/html\r\nx-id-fe: sto5-hw-edge-gc15\r\ntraceparent: 00-b47706ad132c83069bcd4254b996df5e-ec5bb6e3198883c2-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Fri, 27 Jun 2025 12:56:17 GMT\r\netag: W/\"685e94f1-7a6\"\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 27488\r\ncache: HIT\r\nx-cached-since: 2026-02-06T14:10:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1715)","md5":"6c13c5de11aa77e28134ed92fd06de53","sha1":"7380965681ddf82e6227a2b002e02b0c26094947","sha256":"1ce66512c23d789f2ccfb920462493ecc681149ed205d921599acbde2dad7528","sha512":"7bbffc11e56aeccab9351839903b04cf7c7b9878a320af240ff5e43999b8520f5806fe2d53d01c6ff013c0140fb5b4a1a5e510b0128a5202035f8fe205fd5302","ssdeep":"","tlshash":"694154cb38a0a07ac75246852275121853b352203dc2a090faad9d4a3f1198ea3b2bfd","first_seen":"2025-08-16T15:28:34.701051Z","last_seen":"2026-05-16T04:06:49.705098Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/v1/ad","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"OPTIONS /v1/ad HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,project-id\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type,project-id\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/pxl.iframe/","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.giga.pub","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:31:29 GMT","end":"Fri, 01 May 2026 11:31:28 GMT"},"fingerprint":{"sha1":"96:91:60:11:73:D8:51:20:4A:5E:B6:A2:EC:4B:A2:8C:9E:EC:54:72","sha256":"8A:B2:FF:10:81:CE:CB:8D:25:52:2B:AF:6A:19:A5:2C:01:81:67:18:EC:C3:5B:DA:B1:6E:EE:4D:3C:CB:0B:B6"}}},"request":{"raw":"GET /pxl.iframe/ HTTP/1.1\r\nHost: cdn.giga.pub\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\ncontent-type: text/html\r\nx-id-fe: sto5-hw-edge-gc15\r\ntraceparent: 00-3103c438221fadfc29e96931e12d6e75-a8b1c4f76ba8b5a6-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Fri, 27 Jun 2025 12:56:17 GMT\r\netag: W/\"685e94f1-7a6\"\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 27488\r\ncache: HIT\r\nx-cached-since: 2026-02-06T14:10:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1958,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1715)","md5":"6c13c5de11aa77e28134ed92fd06de53","sha1":"7380965681ddf82e6227a2b002e02b0c26094947","sha256":"1ce66512c23d789f2ccfb920462493ecc681149ed205d921599acbde2dad7528","sha512":"7bbffc11e56aeccab9351839903b04cf7c7b9878a320af240ff5e43999b8520f5806fe2d53d01c6ff013c0140fb5b4a1a5e510b0128a5202035f8fe205fd5302","ssdeep":"","tlshash":"694154cb38a0a07ac75246852275121853b352203dc2a090faad9d4a3f1198ea3b2bfd","first_seen":"2025-08-16T15:28:34.701051Z","last_seen":"2026-05-16T04:06:49.705098Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nexpires: Mon, 07 Feb 2056 04:22:20 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\ncontent-encoding: br\r\nx-strm-log-split: 5\r\nx-request-id: 84aa1ee6208687e9\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-13T18:13:53.104118Z","times_seen":28133,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":44,"dns":4,"connect":14,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=82cc22a0-5709-44e8-a173-234eedee4e46","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=82cc22a0-5709-44e8-a173-234eedee4e46 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1759\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1759,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPXGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\nQI\u0015C\u001d\u0006IH\u0005^_\u0003\u0015\u0011A\u0013\u0013[RDP\u0000YU\u001b\u0016\u0003\u0006IH\u0005^_\u0003\u0015\u0011A\u0002FCXY@O\u0010[\u0003QFL\u0002\n\u0016T]\u001b\u001bDP\u0019FCXY@K\b\u0011\u001b[[^YF\u0018L\u001e_\u001b\t\u0007JVMDW\u0011OKC\bSR^GPG\u000f\u001a\u0015\u0003\u0002\u0004BTUJ\u0001\u0011g\r\u001cM\u0004\t\u001a\u000e\u0016\u0016T]\u001b\u001bYE\u000f\u0005[RW/W\u0013\u0010U\r\u000bA^\\\u0004NE`P]R\u0015\u0013\nH;6\u0018XI\u0017QQN\u003c\u001bZXY\f\u0019K\u0000N_Y\u001a\u0003X\tZM\u0017QCN,\u0017W\u0005\u0002\u0018\u000b\u0003\u0007JTHXDB~\u0000\u000b\\\u0007\u0005\u0016DC\u0007ZC\u0007\u001b\u001f\u0014\u0014\u0014[RDN\u001a\u0019\u001d\u001b[H\u0007\u0005\u0006Q\u001c\u0003VU\u001eF\u001e\u0002T\u001e\u001c\u0007O\f\u000b\u0003\b\u0019\u003e\"I]\u0000\u0019RK]W\u0016I\t\f\u0013ON\u0000\u001cN\u0004\u0018T\u0002\u0001d'V^WGS\b\n\u0018\u0004X\u0012\\\u000fTO\b\u000f\u0019\u000e\u0000\u000e\u0007\u001egp\b_\u0014\u0010\u001c\u001a\u001b\u0003TD\t]\u0007G\u0018\u0002\u0017C\u000b\u001f\rP@f3_\u0010\u0006\u0001\u0007J\u0007\u0018UL\u001a\n\r_B\u0007\b@\\A\f\u0013\u0017)!N@\u0014K\fP\u0005HT\u0005\u0007X\u0002A\u0015]APX^[JY@H\u0005[\u0003C\u0002\u001a\u001f\u0002GTB\u0018NDAT\u0005\t\u0018[\u0001N\n\tU\u0000\u0013\u001d\u001b\u001bZ@\u0015NC\u001c\u0014VF\u0017\u000fWX\bE[M\u001bHTI'`-O\u001b\u001b]TX^HDW\fY\u0019[\u0003C=\u0007\u0005A\u0006LA\u0015IG\u0014@TUJ\u0010\u0014Y\u0005[\u0003R]BI\u001aWLW\u0003\u0001\u001f\u0014\u001e\t[RXS\u0014K\u000bM\u0015HTFC\u0018L\u000e_f\\T\u0010FCXY@V\u001e[\u0003PFL\u001c\u0016\u0016T\u000bVU@SVF\u0016\u001b\u0016\u0012MKC\u001b-\u0003\u0000\u001e\n\u0014\u0016U\u0001f\u0005\u0002XH[\u0000\u001c\u0006\\\f\u0017\u001b[\f\u000f\u0007\u0001QBOTQlY\u0018\u000e\u0026\u0001\u001b\u0006]\u0011[\u0003L[BI\u0005]\u00002\\\\JE%\b\u001c\u0006\u0012\u0016PKC\u000bXRBI\u0011[\u0002\u0002EfWS\n\u0010\u0011JOP\fE[O\u0004\u0004\n\u0004\u0000\u0016TO\u0015\u0015\u0011Q\u001b\t\u001c\u0018\u0014\u0006KKC\tMH\u0000\u0007P\u000eL\bY\u0014feXH[\u0006\u0019\u0011\u001aS[\\\u000fG;8^Q\u0000O\u001b\u001bPY\u0016\u000b\u000b7\u0012\u0003U\u001c\r\u001b[H\u001d\u0019\u0015VLA\u0015IUZX^[JY@[\u0005\r\u001b[\u0011\u0013GPD\u0002\fC_\\D\u0017;\u001d\r\u0001\u0007[\u001d\u0016KCP\u0015I\u001bG1\fY]AY\u0013\u0000[R\u0013\u0003T\u001a\u001c\u0015C\u0003\u001d4\u0006F\u0007\tRWG\u0014@\u0002\u0018\u0004\u0006\u0007\u0014K\u0010J\u003e\t\u0006\u0019\u001dY\u0007\u0018Zf\u000b\u0000%\u000b\u000b7\u001b\u0007O\f\u000b\u001b[\f\u000f\u0007\u0001QBO^JlU\u0012\u0016\u0016\u0005\u001c\u0017UKC_\u0000\u0006\u001d\u000e^\u0016\u0007\u001eh\\WQ\u001fFC\u000e\u0014\u000eK\fU\u001b\b\u00191\f\u0017W\u0005\u0002\u0015\u0003GD\u000f\u0001UJ\u001c\u0011g\u001e\u001c[\u003e\u0001\u0007\u001fP\u000e\b\f[JV\u001aX\r\n7\u0002\u0007Z6\u0012P\u00155X[Dk\u0001\u001fhWVA\u001f\u0016[R\u0013\u0003T\u001a\u001c\u0015C\u0003\u001d4\u0016Q\u001d\u0006CVCi\t\u0005\u001f\t\u0007\u000b\u001aS\u001fX\r\u0019\u000bGP]\u001d2TQAY\u0017\r\f\u0005*\rH\f\u000bXCP\b\n\u001eG\u000b\u0010\u001b\u001b]S\tFCJGT\r]M\u0001Y_]^P\u0018L\u000e[PVX\u000e;\u0010\fWX\u001aX\u001d[X[XR\u0014\u0019W]Q\r\u001e\u0002\u0018V\u001dE\u0017W\t^T[\u0002^Y\n\u0013V_TT\bU\u0014VF\u0018\u000e\u0013\u000bT\u0000\u0018M\u00045\u0007\u000fP\u000eLO\u001b\u001bGD\u001b\u0002\u001f\u0001\u0016=K\u0006\fK\u0002\u000f1\u0002\u0016\u0016TO\u0006\t\u0000\u0005N\\O]WN\u001a\b\u001dO\u0004\u0018\u001a\u0002\u0001Q\u001c2^]\u0011\fXFUJ\u0016\u0003U\u0019\u0018P\u0006\u00041\u0002\u0016\u0016TO\u0015\u0015\u0011U\u000f\u0017\r\u0007\u0018=Q\r\u0026\bCPL\u001b\u0007G\u0006\u0006^W\u0011\u001aX\u0007\f\u001b\u0001\rU6\u0010]\u003eXLQP\u0016BOTUZU\u0011;\u0010\fWX\u001a\u0007\u0012WYXC\u0001\nD\u0004^SO\u0007S\u0019\n[DW\u0001W\u001a\r\u001b[HLGPY\u000b\u0019_VW\u0014@F\u001a\t\u0016\n]D\u0013JL\u001e\u000f\fP\u0018L\u001fhLZRX^[PG\u0001[[KXQG[\\B\rCY\u0003\\\u000b\u001b\u001bUN[XP\u000b]\u001c\\\u0005\u000f\u000b_\u0017\u0000XO\u001b\u001b\\W%\r\u001dJO@\bQI\u000b\u0005_\f\bDV\fZ\u0003\u0001P\u0006\u001cUO\\\u0011W\f\r\u001d]P\u000fW[EVLA\u0015XWR\u0013\u0010\u0010\u0007\u001b\u0003T6\u0010]\u0012HT0\t\u0016\r\u0001^\\]B%\r\u001dJO@\t\r\u001b\u0000P\\W\r_\r^\u000b\u0003\u0014\u0007TH\u0000T\n@S\u000fD\u001bZU]\u000f\n\u0010\u0005W\u000e\u0006_\u0011\u001aX\u0005\u001f\u000e\u001c\u000eQ\b\r\\\u003e\u0003\nIH\u0016LA\u0015MAW\u001c\u0002\u0010\u000b*\u0011W\u001c\u000bZ\u00045\u0007\u000fP\u000eL\\\u0007\u000b\u000b\u0003MVOJY@Y\r\u000f\\\u0013\u001e\u0007\u0018\u0017F1\u0004S\u001b\t\u0014XH[\u000b\u0014\u000fH\b\u0010^\u000f5\u0007\u000fP\u000eLO\u001b\u001bPC\t\u0010\u0016\u0005*\u000b\\6H\u001b[H\u001e\u001e\u0001\\\u0005\u0004Y\u001b\u001f\u0014\u0019\u0011\n\u001c\u001a\u000fg\u0000\u001dfSHTIP\u0018L\u000e[PP]%\r\u001dJO@\f\u001c\rPTG[]\u0005D\t\f^X\u0005Q\u001bFUJ\u0016\rK\u001d[\u0003CHBI\u001fQ\u001a\u0005X]\u0011\fX\u0007\u0018\u000b\u001d\u0007\u0015\u0003\n\u0014\u0015\u000b\tI^\u0016\u001c2BPW\u0014@FK\rA\u0003\f\bH\fL\u000b\bRF\u0019ZXQ\b\u001eWBQAEGW\u000eQ\u001b\f\u0002\u000b_Z\u0017RLA\u0015VRi\u0013\u0000[RWR\u0000YK]T\b\r]\u0010VYY\u000fZ\u0003PKRM\f@V\\\r\u001d\b\u0004S^\\\u0010\u0016BOV]W_\u000e\r\u0016\u0006\u0014\u000eg\u0000\u001dJCP56\u000fi\u0013"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Fri, 06 Feb 2026 21:48:53 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://www.app.cvcplayspin.xyz\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-06-13T18:28:49.712531Z","times_seen":57512,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":109,"dns":11,"connect":27,"send":0,"wait":28,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/401/10285726?oo=1\u0026sw_version=v1.788.0\u0026oaid=x1ne938643em451348522u0b2khrz825\u0026tgp=unknown","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"POST /401/10285726?oo=1\u0026sw_version=v1.788.0\u0026oaid=x1ne938643em451348522u0b2khrz825\u0026tgp=unknown HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3396\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: OAID=x1ne938643em451348522u0b2khrz825\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3396,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkEVkYLASoQTktDClBGTBkCRExXBAAfFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQX0dQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNZWUBQABUbW1tCSQddCk8NCR8UHhYfSk9SFEsJVUNQXkdQWglPDQkfFA4eW1JEThoHGxtbWkJJHFUeTw0JHxQKEFtSRU4aDA9YDUhUW14WBg4VAwIaWAAUSk9SFEsLTRVIVFteFg0FaFZRXFheSURXDE82Dl1DUF5HUFsdDkdMEQxLSFsAHAZcDBcbW1tCSRFcMQJVU2xfFAAcEFdYCEVbTggEMQAXTR0yW1xdUQ4MW1JFThoKFlUOGDEPF0QaBRUDAxpYEhwGEQ1KS0MITUgJCh9RHgxTShEMSkhbBhk9VgUKG1taQkkRWwICRWZUVxcRDUpPUxRLCV8NSFRbXhYNHl4bCQdWRhoEAUACWVUbCxkeSUgEQk9HV0cUQFRVSgUMSgpbA1FGTBseVRoLWEteaR4BDQ0WFlcbWwNZRkwFF0dMVwQKThpYFhBKT0BUBQ9UEQMeDlAYTB9BGwkUNwEKCVdOGhsJSUNQXUdQQBQCFQMDGlgTDkpPUwpRSRVDHQZJSAVeXwMVEUETE1tSRFAAWVUbFgMGSUgFXl8DFRFBAkZDWFlATxBbA1FGTAIKFlRdGxtEUBlGQ1hZQEsIERtbW15ZRhhMHl8bCQdKVk1EVxFPS0MIU1JeR1BHDxoVAwIEQlRVSgERZw0cTQQJGg4WFlRdGxtZRQ8FW1JXL1cTEFUNC0FeXARORWBQXVIVEwpIOzYYWEkXUVFOPBtaWFkMGUsATl9ZGgNYCVpNF1FDTiwXVwUCGAsDB0pUSFhEQn4AC1wHBRZEQwdaQwcbHxQUFFtSRE4aGR0bW0gHBQZRHANWVR5GHgJUHhwHTwwLAwgZPiJJXQAZUktdVxZJCQwTT04AHE4EGFQCAWQnVl5XR1MIChgEWBJcD1RPCA8ZDgAOBx5ncAhfFBAcGhsDVEQJXQdHGAIXQwsfDVBAZjNfEAYBB0oHGFVMGgoNX0IHCEBcQQwTFykhTkAUSxFQDUhUWl4WGwRTGwlYDwgVRFcGSg9bA0NIQkkCWExXFVFHQgoXQ0daFU8eV1gRGkAIBFceAVZAQEYTClcQDBgXS1UbDw1MUUIYTBlNGwkULzA6SllAVgtbA1BGTAUTRExXFW5aWElWW0RXEkxLQwlNSAsdE1hMVwQOHxQSB1tSQVoUSx1UQ1BDWl4WHBlDGwkbS0hbCx09VwsTG1taQkkcQ0xXBhURQR5GQw4UDksMVRsOGQ0bBxZUT3tQXUMCRAFQQz0OXVsVQwIHDxZRAE8NX1JaCQFVShYKZwYbUz4DAA8XTExXGggfFA0NFzceB0EaJlUEBAkfGhZUXw4PHxQZCxUHBz1cDAlNCUhUWUYYTBtSV1dZCEZDSldOGg4YVAQaDw8BFlRdGxtdWlheWw0bT206WxVDBAIYUA5MCFkUZmVWARdKWUBbBhVWEzUJCh9BGk8NG0BEHQZbRFcSXgVbA0NIQkkRWBpPDUJOGlgOChhXWAlFW0kPHkxRQhhMHVlLUBRAVFVKBQ5ZHR9WEwcxDxdACw5DVkEUQB9bAQY9WQcdSw4DCklIUg8BRFwfFBMXJhwHC1wMF01DUAgKHkcLQRVQQGkZDAsHGAtNBCYBVzUBGS1aCxpSSxEMHAUVGxBOGgAKZgICHAQfXRsAFQNVVxYXHERXC0s2HF0GD0xRFFUCHlIVEV8JOx4NFglXS0NNEx8LR1BdHTJAXFFpEQ0NSk8EWQUKXE1IBxgtQwsPaFJaQiVSSV4qDUo2F1wWDxxJSFIPAURcHxQTFyYMEBFTHRZJPhkPDRNGB08NX1JaCQFVShwRZwoRSw4HBx4fawEdUktSFEACGAQGB0VFW1cEGUxRUAZYWAMNCw5PV0xKWUBbBRBcDx4xAhYWVE9CV1hYFRMXSllAWQ8fUA0DDx8XawcJFQMRFFZGDRoUBF4AGmYSBRsZEVExBFMbCRRYSFsJERRdGw1QEg8cNBtQTFcVGx8UGQUUGBQLXwcmUAVIVElQGEwOQkpHWRc7EAwqUxpTWxtNSA0eAUABAGhQV2lIRkNKV04aChVQAgExAhYWVE8VFRFVFRcNSk9AGkVbVAQeBgQWFlRPXUpHVx1GVUoHPU0AHRtbSExHUFsPMl5dEQxYRlVKFAZcAA1QDgQPBy1dCh4VA2hrBw==\",\"async\":\"TBtXQwgXW1IOQFoIDRtbWEJJGl0AGUQbCQdWRhsEAQoaU0gVQwIHDxZRADJeX0FXFwFbUkRUFEsNVhULAklIBVgQGxtRVw5GQxNXC0s2G1gVSFRbXhYNBVZLVF8UA1tSRU4aChFYEw0HBRVrGgRaXBEMSkhbDBwRWwEYSwYDAAwtQAcAUhsJBlZGFQ0DB1RLQwkcRkwDG1oaHhUDSEtWRhsEAQoaUwIbEh8eGx1GGghTGwlQGwgKDVlAWR8YUA0LDAcXFlQLVlVAU1ZGCw0UEVcHWwNDBAFGHFUYBFBYR1kISRsEAAdMBhZNCUgTR1BcBwlTXF1pEwILCRgHGlNJFUMJAgIXWhoyXl0RDFgRFwMbDU8HWxVDCwgNG1gHDENcbF8eRkNKV04aHQtYBwwHCC1HARhFWlZpEwBbUldAFEsYXRcPHB8bRwsfaFBXFEBGW0RXAVkECVgIDQA0G1BMVxUbHxQZEQocGg9nAB1mUEhUSVAYTA5CSkdZFzsQDCpQGlNbG01IDQcbVwUyXl0RDFhGVUoWDUsdWwNDSEJJH1EaBVhdEQxYDgocFAUaRVtLPh8HD1AOTE8bG1xXJQ0dSk9AGkVbWAUOBx8bWwAMW2ZaUglGQzMoHw==\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.app.cvcplayspin.xyz/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":0,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-type: application/json\r\nx-trace-id: 96f4bcd268845a861dcf3465279973f4\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=x1ne938643em451348522u0b2khrz825; expires=Sat, 06 Feb 2027 21:48:53 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7354e7d630da685701b6ff2e4f45e448","sha1":"f1c580eae0d16499f78d9a712b9fd59281078476","sha256":"91713108cd15d5b49349919c6ba954c1347e5c0821bc1bf025d8d66a80438e43","sha512":"95a89d220385f7093af49abd215b5516c2aa39b270bf891f97c604893df6422e253ce7b5abb60f7cac7d5326de71470445b07d435a02e49239779737d00bf085","ssdeep":"96:XriPtp/ScHmEuCs1dC8riPtp/ScHmEujsMi3c63cG:bsp/Sus1dlsp/SnsMovV","tlshash":"d5a112085d18013a82de5abaed0b6e471abd052f390c761ef7891d17b0ebce503eb10b","first_seen":"2026-02-06T21:49:19.084132Z","last_seen":"2026-02-06T21:49:19.084132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10396669?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:55.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"OPTIONS /500/10396669?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:55 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/get-rtb","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"POST /v1/get-rtb HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nplacement-id: 19038\r\nproject-id: 4669\r\nx-version: v31\r\nContent-Length: 113\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"user\":{\"user\":{\"id\":-1,\"vip\":0,\"language_code\":\"*\"},\"platform\":\"unknown\",\"version\":\"0.0.0\",\"start_param\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\netag: W/\"25-jLKkh9f9it4eiXgjgmylL5+KDlM\"\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c609c0bcefd33409a8188e1eacbc7f4a","sha1":"8cb2a487d7fd8ade1e897823826ca52f9f8a0e53","sha256":"c18ddb07285f5e8b5a528a9440a27b820757be7074e67dfa6807ba05eadbe485","sha512":"988ee5f0f8d9be6f0ea5ad4e178a12df71de5570b1151808ff442f5c27f9ab8e9f8fb140ff4619925bbcbc9bd1a2ee9fd66063e6d7dd3d3a3c58ba8ad6ae88f1","ssdeep":"","tlshash":"0780002020080e28c8c02000fa002332aac00808280a22e08a8c08af22e2a83a88a088","first_seen":"2025-08-16T15:28:34.694417Z","last_seen":"2026-05-16T04:06:49.699718Z","times_seen":12,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303804/068a863816c1593d3c3e.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303804/068a863816c1593d3c3e.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17521\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Mon, 07 Feb 2056 04:19:55 GMT\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Thu, 05 Feb 2026 17:10:53 GMT\r\ncontent-encoding: br\r\netag: \"29bedd5bdb67347c5a8aa18272a96bd6\"\r\nx-strm-log-split: 3\r\nx-request-id: 580455b3ee287e82\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75049,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"582ffcd3e4a5451f8868c96390d67345","sha1":"95bc600b83f5345f64247f30648bb1a1d0664ffc","sha256":"af2a9727707de353552a3a9fe6dd44adb8aca268a19037fca9571c35841e4415","sha512":"18967c28bf5dd7075af99b51e0d60daffeb23c30538fed11e4d52cf682da593156bc653f07a71b6f4bdf56d7bc16a62f481140889ad61d92f2b69e20ec6c9ec7","ssdeep":"768:oIQBshVVNu+NSW/lUSuZqyaEDVPrBDj3yjGkSF0/pnr2FAY17h8q:fQBqK7Zqv8BD7y/FIAYxWq","tlshash":"2273ead97595b9ba02c3d8f1443f220ee37b9611711a6580b323dac1ec25adf5223e7e","first_seen":"2026-02-06T09:12:52.893539Z","last_seen":"2026-02-09T05:59:08.98244Z","times_seen":157,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":52,"dns":1,"connect":13,"send":0,"wait":22,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=x1ne938643em451348522u0b2khrz825","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=x1ne938643em451348522u0b2khrz825 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: ID=0802d5bc6bb748c0f164d54ddd1e907b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:52 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c9ddaae0ef88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a2596f80ae6afe01326d89ff624ae34","sha1":"91f050a726f0c0f04eec901451c13bc717367797","sha256":"720ebad2b2521f6bd393402da5e97cb08e7927ff1e3e8e65b4dab1365302297a","sha512":"6c52f88a3238b6f66c6a6b618ee19641c6c22cacc0f54b15d72ac0f3d776cea9c338302930d625df7058b00282ff00bde972957dac8c6f253aa1faac4c495079","ssdeep":"","tlshash":"fda0024304586fc892a91d1e2bcb9a854151a195ba1bd24541d6c00221c794e4f4d781","first_seen":"2026-02-06T21:49:19.072708Z","last_seen":"2026-02-06T21:49:19.072708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ruksoutsaishu.com/www/images/fa09c3d0d05f7d01ec388b4373228077.png","fqdn":"ruksoutsaishu.com","domain":"ruksoutsaishu.com","tld":"com"},"ip":{"addr":"104.21.80.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ruksoutsaishu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 12:59:19 GMT","end":"Mon, 16 Mar 2026 13:57:50 GMT"},"fingerprint":{"sha1":"BB:12:1F:3E:99:02:B8:32:F8:25:6D:0D:6B:0D:42:C8:A2:7B:4D:19","sha256":"3C:F0:E4:20:8B:15:09:E1:8E:C6:4C:EC:C3:0C:10:ED:7F:09:DB:E2:1E:A1:63:F8:90:AB:7C:CB:B1:0E:6C:99"}}},"request":{"raw":"GET /www/images/fa09c3d0d05f7d01ec388b4373228077.png HTTP/1.1\r\nHost: ruksoutsaishu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2354\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Mar 2025 11:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d2c6b8-932\"\r\nexpires: Sat, 07 Feb 2026 06:43:38 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 54315\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyHlr%2FYFbdO3s5u1kD4ZjeqJi5ZsmdHIYRcNv1qdO6dJ8pr1kCC1uVJ9877voyFZ1vFEV3bzFdiLNQU3tpqCpREwrnBxs3%2BCuYN7h3Z%2B7w%3D%3D\"}]}\r\ncf-ray: 9c9ddab60def0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 4-bit colormap, non-interlaced","md5":"fa09c3d0d05f7d01ec388b4373228077","sha1":"4462b250f097f3503ed89620137c428a07d08a2c","sha256":"dfc621aca09ed0c1488b5131d842363a53b81589c81e60fd0de8d639f927acc6","sha512":"16c87eaa961ebc6be7bb7572c9d93fbe62c8b449796f2cb19b6ea48e2ba60a43e03acd2aff36adf4ea966dd38bc06feab9c4c888ceea5a64909c0dfe800bf903","ssdeep":"","tlshash":"ec415bfee2d06b3848162d4efb54932950db07d6058e289b5212fb098fe0361f1e5888","first_seen":"2025-01-01T15:00:37.673789Z","last_seen":"2026-05-24T10:07:31.076895Z","times_seen":79,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":28,"dns":8,"connect":1,"send":0,"wait":12,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/html5-qrcode@2.3.8/html5-qrcode.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /html5-qrcode@2.3.8/html5-qrcode.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c9ddaa3b9c67131-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 339060\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:51 GMT\r\nlast-modified: Sun, 15 Jun 2025 08:13:26 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:ZgsSQ3sddH4+aLi+BoXAjLcoFAEQrSE/FnsUtm+LHY4=:\r\nfly-request-id: 01JXSACZHA8FQR1ZD8G9BJ49J4-ord\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":375364,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d88d3200cb547c9e86ee972975561dcd","sha1":"e3c006ca0e03e145c58082471ab651415ef644dd","sha256":"660b12437b1d747e3e68b8be0685c08cb728140110ad213f167b14b66f8b1d8e","sha512":"afaac303b5ba65e421be5f12ef24554142951dd7b1abe18094d90d36a542ed8c8857e370a824c97b684358289f7d3c9134e78613345127d89fbd19bf1c2cc662","ssdeep":"6144:bmGilTOabmeTmQsdkjtG+47qc263kDsTKUOwpSkPwDsO/Ae9hAyb3cK:CGEBTmQsdkjtG+47q83kLvs0Ae9hAybb","tlshash":"b284f99172a170f293da11da04760045f76a65a8780a447cffa8addb6c79cc392fef34","first_seen":"2023-06-15T19:11:44Z","last_seen":"2026-06-13T17:40:25.43185Z","times_seen":1660,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richinfo.co/richpartners/telegram/js/tg-ob.js","fqdn":"richinfo.co","domain":"richinfo.co","tld":"co"},"ip":{"addr":"5.200.15.239","port":443,"asn":49544,"as":"i3D.net B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richinfo.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 23 Jan 2026 06:34:03 GMT","end":"Thu, 23 Apr 2026 06:34:02 GMT"},"fingerprint":{"sha1":"E1:7C:D8:FE:3A:D5:D3:5C:08:7A:9B:43:08:3A:83:AD:EE:47:25:AF","sha256":"C6:81:85:1F:BD:2F:CF:16:8D:8D:D7:8B:4B:04:B9:30:39:08:D2:37:21:C9:68:1C:91:B1:C9:A9:D9:22:EB:FB"}}},"request":{"raw":"GET /richpartners/telegram/js/tg-ob.js HTTP/1.1\r\nHost: richinfo.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/x-javascript\r\nx-amz-id-2: HJjciL7whFmzpqpBYKN9vqRTFDC91xX4kAHTTyOQw39XYGQuX7piqet0M193xHz7XzhIHhZzBzk=\r\nx-amz-request-id: 9T1ZSDNBDE9KGV85\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 18 Dec 2025 09:22:16 GMT\r\netag: W/\"12a78f58864cade5d164beccd3b3f617\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: uBina2AyjjaZNB6PvvyjXqG1bqIuJlnT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":253126,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"12a78f58864cade5d164beccd3b3f617","sha1":"eb1a31d615b0fefb556c05b37859669b88e5a92f","sha256":"187da98abe3e2ae125dd08bf8335c464a42b9afb06f84a264cd6c6b571825529","sha512":"2a1f8964af62bf3c1c4617f31bf6e0fc0c0f477666800dd3700bb37fccbc25cbcc5032b4f565edf778a00e4d075312e98135b1d1b8f7dbfece0215eb602e0c74","ssdeep":"6144:HTXnvYVp1BEe+KpaeIG8zgRHrJ5N5nkfvicNKKOVWCYuOtKduXn:HTfYBSE8eIG8UtVnK6ckKrn","tlshash":"0a3470812bc1fc9d13874b763336a5e6e5298f99a4890b8af054fc54f09e913faec570","first_seen":"2025-12-04T11:23:29.55944Z","last_seen":"2026-02-06T21:49:19.086855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":84,"dns":12,"connect":27,"send":0,"wait":54,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=x1ne938643em451348522u0b2khrz825","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=x1ne938643em451348522u0b2khrz825 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: ID=0802d5bc6bb748c0f164d54ddd1e907b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:53 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c9ddab2dd5a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3a2596f80ae6afe01326d89ff624ae34","sha1":"91f050a726f0c0f04eec901451c13bc717367797","sha256":"720ebad2b2521f6bd393402da5e97cb08e7927ff1e3e8e65b4dab1365302297a","sha512":"6c52f88a3238b6f66c6a6b618ee19641c6c22cacc0f54b15d72ac0f3d776cea9c338302930d625df7058b00282ff00bde972957dac8c6f253aa1faac4c495079","ssdeep":"","tlshash":"fda0024304586fc892a91d1e2bcb9a854151a195ba1bd24541d6c00221c794e4f4d781","first_seen":"2026-02-06T21:49:19.072708Z","last_seen":"2026-02-06T21:49:19.072708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vast.yomeno.xyz/vast","fqdn":"vast.yomeno.xyz","domain":"yomeno.xyz","tld":"xyz"},"ip":{"addr":"109.206.167.71","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vast.yomeno.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 03:02:30 GMT","end":"Thu, 30 Apr 2026 03:02:29 GMT"},"fingerprint":{"sha1":"89:BE:39:86:01:62:94:0A:25:31:1D:1C:14:E5:F6:63:AC:8A:94:AD","sha256":"E7:AF:6C:73:E3:A0:5B:4A:0B:A4:38:3F:9C:3D:99:5E:80:6D:F4:48:E8:66:B0:19:34:C1:D4:0F:CA:15:C1:B5"}}},"request":{"raw":"POST /vast HTTP/1.1\r\nHost: vast.yomeno.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1461\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1461,"data":"{\"imp\":[{\"secure\":1,\"ext\":{\"user_keywords\":\"\",\"tag_ab\":\"d\",\"title\":\"CVCPlaySpin_bot\",\"site_id\":0,\"spaceid\":6101161,\"type\":\"overlay\",\"subid\":\"\",\"idzone\":null,\"utm1\":\"\",\"utm2\":\"\",\"utm3\":null,\"utm4\":\"\",\"vmap\":0,\"spot_id\":6101161,\"ad_tags\":\"CVCPlaySpin_bot,\",\"refdomain\":\"\",\"gyr\":0,\"accel\":0,\"skip\":5,\"event_id\":\"de6997b2-0d9a-48d4-a14a-ef05cf016efc\",\"ad_format\":\"\",\"approved_mainstream\":0,\"is_iframe\":false},\"video\":{\"w\":1280,\"h\":1024},\"pext\":{\"ab\":false},\"metrics\":{}}],\"site\":{\"id\":\"6101161\",\"cat\":[\"IAB24\"],\"page\":\"https%3A//www.app.cvcplayspin.xyz/\",\"ctid\":4},\"device\":{\"w\":1280,\"h\":1024},\"user\":{\"id\":\"2187558522521630700\",\"interest_ids\":[],\"telegram\":{\"user_id\":0,\"username\":\"\",\"first_name\":\"\",\"last_name\":\"\",\"color_scheme\":\"light\",\"is_premium\":false,\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"is_webview\":false,\"social_network\":\"telegram\"},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"ext\":{\"dt\":1770414533669}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding, *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"284540cd4b526b22f747331c74f84875","sha1":"3ad909b7b5a50dbefb36da94067504b68d653bbd","sha256":"e898e04daea0e5adf1c1fd35c51aa499e232c986ec462b04cfde51403d17e340","sha512":"07a2f530bf179b7104dc7478294c8beb4912fa9e13785994efc8e89663608129d0013afa48d2b5b15b3cc34c3fa182c25c41d6795c05b27a038b48bb0e9f279f","ssdeep":"","tlshash":"e7417357465cb98b4fb410993cc33784c4da221ba5ed2ede91d08c2d452c814538bbd8","first_seen":"2026-02-06T21:49:19.087557Z","last_seen":"2026-02-06T21:49:19.087557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/v1/ad","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"POST /v1/ad HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nproject-id: 4669\r\nAuthorization: Bearer CEEUHXgZVL184wyaDp6laEchjHQ7RNN3\r\nContent-Length: 271\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":271,"data":"{\"method\":\"adLoadScriptError\",\"args\":{\"user\":{\"user\":{\"id\":-1,\"vip\":0,\"language_code\":\"*\"},\"platform\":\"unknown\",\"version\":\"0.0.0\",\"start_param\":null},\"placementId\":\"main\",\"network\":\"t\",\"showCounter\":0,\"message\":\"Unable to get user data\",\"version\":\"v78\",\"type\":\"default\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-13T18:29:52.312365Z","times_seen":709561,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/401/10396669?oo=1\u0026sw_version=v1.788.0\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:55.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"POST /401/10396669?oo=1\u0026sw_version=v1.788.0\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3392\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3392,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.app.cvcplayspin.xyz/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":0,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:55 GMT\r\ncontent-type: application/json\r\nx-trace-id: cf03dd297bc91bff04717e2b114124a4\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:55 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a756dec9a839a3fd1df9121f18d9488","sha1":"6372401dbc5635819c8a0222ed361177cf3fc02d","sha256":"011b8b5028fa97970d8c400c3c20d745927ff6c86a243ebb191e8ef778099841","sha512":"65d5e26ac899522c26ec13b843b94a5b324ee436dac858a8d1ed0805fa118ce7560d730eb74a868f89a3fc6bb82b273b9b8cf10daa5b44c14f305c6a24ccc7b0","ssdeep":"96:ChriPtp/ScvUCsiTeriPtp/ScvUjsWi3c63cG:+sp/SUsiKsp/S1sWovV","tlshash":"98a134094d28057e82ce5a79dd0b2d471bbd066f790c761ee7895d1770ebca503eb10b","first_seen":"2026-02-06T21:49:19.088282Z","last_seen":"2026-02-06T21:49:19.088282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/get-rtb","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"OPTIONS /v1/get-rtb HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,placement-id,project-id,x-version\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type,placement-id,project-id,x-version\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/init","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"POST /v1/init HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"projectId\":4669}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 30\r\netag: W/\"1e-mfXw8QtOfuPvPGzow28fVjCvyYY\"\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dd4458d833ad7f0e4cc97836193e974b","sha1":"99f5f0f10b4e7ee3ef3c6ce8c36f1f5630afc986","sha256":"e100103ed4e6e2cfe00134c46243004ac18bea8f4201f0f3a81df6939e9b0bf0","sha512":"72b2c1145ff1ade851d26bec3f3c8ed11ed10730dd9e02fb0fbb5009cd9915ffba2cf2eb060669be176a4b7ce5b8b83c370e149855fce1716f16685e42948920","ssdeep":"","tlshash":"f68000e800022a0a03038020222b00fb0028088028800308ac20880a20ab2a002b2008","first_seen":"2026-02-06T21:14:27.882024Z","last_seen":"2026-02-06T21:49:19.089054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.app.cvcplayspin.xyz/icons/ton_icon.png","fqdn":"www.app.cvcplayspin.xyz","domain":"cvcplayspin.xyz","tld":"xyz"},"ip":{"addr":"115.187.18.216","port":443,"asn":133070,"as":"EBN HOST LIMITED","country":"Bangladesh","country_code":"BD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cvcplayspin.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 20:04:55 GMT","end":"Sat, 25 Apr 2026 20:04:54 GMT"},"fingerprint":{"sha1":"34:FF:8F:5A:40:D4:1D:EE:79:67:5F:A0:F3:DF:20:52:AA:FA:E7:EB","sha256":"19:5F:A5:62:93:A0:6B:80:F6:5A:86:06:A5:E6:43:C0:8E:CD:81:53:E5:01:19:D2:3E:51:02:39:26:D9:AB:15"}}},"request":{"raw":"GET /icons/ton_icon.png HTTP/1.1\r\nHost: www.app.cvcplayspin.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Nov 2025 03:14:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2203\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 148, 8-bit colormap, non-interlaced","md5":"7805bb9ce3a8bf69a4c8e16213d4cfcf","sha1":"fe34cab93f32e257219cf6e60409b9020155b408","sha256":"d152bd06de1a5a1e8efb1be3f7da83a75eb91ef627ae76c755c71b5299ea1dbf","sha512":"b84811b56cc468c530ca8122cc3d17d9eee56b0a0dd2115c4d5434e63992dc6a68caaa6d9c19813c1ec31853adb681d5524e6791178430ee088d342eac4c2321","ssdeep":"","tlshash":"454109ce718852b2df0640b9c14496acfcb50acfc4e2de78eb456839cb1264d2b960cb","first_seen":"2026-02-06T21:14:27.884136Z","last_seen":"2026-02-06T21:49:19.089539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tgads.space/assets/css/style.min.css?ver=1.68","fqdn":"cdn.tgads.space","domain":"tgads.space","tld":"space"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tgads.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 02:02:23 GMT","end":"Mon, 13 Apr 2026 02:02:22 GMT"},"fingerprint":{"sha1":"26:E7:1A:DE:6B:F9:B1:3E:A7:94:C5:45:FC:D3:9E:3E:DF:44:62:9F","sha256":"F0:52:74:5E:B8:0A:86:19:23:D2:62:73:91:B8:5B:DC:9E:EE:43:22:A9:98:A6:48:93:E3:91:4B:09:B7:9C:CA"}}},"request":{"raw":"GET /assets/css/style.min.css?ver=1.68 HTTP/1.1\r\nHost: cdn.tgads.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3203764\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=180\r\ncontent-encoding: br\r\netag: \"6986184f-1fe4\"\r\nlast-modified: Fri, 06 Feb 2026 16:35:27 GMT\r\ncdn-storageserver: DE-1141\r\ncdn-fileserver: 984\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/06/2026 16:40:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 50ebdaacaad942675d1b4a3f3eb7e8d2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8164), with no line terminators","md5":"a903879e49499109fcc5208547ed24c3","sha1":"db3a78df4752cd5d57c1644e91f4506e13b4d27f","sha256":"3e75bac9768d67b31d68f8adff69ed4e242c740fcdf0190ba3d9a8141ad7e39f","sha512":"28b485b5928152f9ee04083da591424e1a1e89e7251c1e86131c0971b11e4e89420b16ebf226e63d3d2f46f918a683f6b4e953bc0a020f758c88095d52b1df8e","ssdeep":"96:1Bp5IAO9V+ZjelElacxLgEhFTkpFRVCR30MTJYQ+cBoo5A:rPIAOWNTUcxLgM0Fb830MTJYpcB9A","tlshash":"d1f1bc32a9461024f3bb805da5c19edb377ad4c7d2674ebfeac6b6a1c6cd9831131281","first_seen":"2026-02-06T21:14:27.845912Z","last_seen":"2026-02-06T21:49:19.090084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/init","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"POST /v1/init HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"projectId\":4669}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 30\r\netag: W/\"1e-mfXw8QtOfuPvPGzow28fVjCvyYY\"\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dd4458d833ad7f0e4cc97836193e974b","sha1":"99f5f0f10b4e7ee3ef3c6ce8c36f1f5630afc986","sha256":"e100103ed4e6e2cfe00134c46243004ac18bea8f4201f0f3a81df6939e9b0bf0","sha512":"72b2c1145ff1ade851d26bec3f3c8ed11ed10730dd9e02fb0fbb5009cd9915ffba2cf2eb060669be176a4b7ce5b8b83c370e149855fce1716f16685e42948920","ssdeep":"","tlshash":"f68000e800022a0a03038020222b00fb0028088028800308ac20880a20ab2a002b2008","first_seen":"2026-02-06T21:14:27.882024Z","last_seen":"2026-02-06T21:49:19.089054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\ncf-ray: 9c9ddaa18a905687-OSL\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":64,"dns":1,"connect":1,"send":0,"wait":59,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"munqu.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:14:58 GMT","end":"Thu, 09 Apr 2026 05:14:57 GMT"},"fingerprint":{"sha1":"6A:99:F1:85:CC:D8:22:79:6F:D0:DD:FE:5C:D1:95:32:2F:E2:B7:16","sha256":"B9:B5:49:57:04:3B:FB:AA:EE:33:D0:37:88:81:75:D6:74:67:6B:60:A6:35:35:36:2F:1E:EE:BD:62:DE:1E:65"}}},"request":{"raw":"GET /sdk.js HTTP/1.1\r\nHost: munqu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=86400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":80,"dns":17,"connect":26,"send":0,"wait":81,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10334865?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"GET /500/10334865?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: OAID=x1ne938643em451348522u0b2khrz825\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: c70ab8cb3bdf894a8b2e65b30d8e61b2\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:53 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15295,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"3859f65d5285a6a6cc851806dfd3ad56","sha1":"0395d06286d7f1a7a5ec027411095f72042cfab3","sha256":"9821ead67491e136e9e25eeb13007d1421b8a6bae588e9069c70baeff3ef7eb4","sha512":"12b516b48e6c6fbb152f23602444169e55101dfb6c3bc1f73be054ca0a1395ec5d84ae76a43bf54ab0a6a2f25afbda70d8f6e9cdcb4687e5f39f43a8f26406e5","ssdeep":"384:JABruJW2UgmsHyGZpeKf3LjD+7Xn+9k3kZcp:JgyJW2UgmmyGZcKPLjD+7Xnyk32cp","tlshash":"0c62d7dd3780c402d4c3ae1c6b721e3ab8df1d0d4ff558cc765af66542ae0b909e668a","first_seen":"2026-02-06T21:49:19.090568Z","last_seen":"2026-02-06T21:49:19.090568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10285726?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:53.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"OPTIONS /500/10285726?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:53 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.gigapub.tech/v2/intCfg","fqdn":"ad.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"162.55.152.82","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Dec 2025 08:00:34 GMT","end":"Wed, 18 Mar 2026 08:00:33 GMT"},"fingerprint":{"sha1":"B1:41:01:F3:74:6B:34:F0:36:19:7B:85:68:6A:1F:89:C3:E0:E8:92","sha256":"1B:C7:6E:A1:E3:CE:6A:11:3F:79:BE:2B:B5:E3:23:42:75:99:DC:0C:F3:CC:47:8E:C3:14:09:D5:96:04:41:BE"}}},"request":{"raw":"OPTIONS /v2/intCfg HTTP/1.1\r\nHost: ad.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,project-id,user-id\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type,project-id,user-id\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":59,"dns":1,"connect":25,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"munqu.com/sdk.js","fqdn":"munqu.com","domain":"munqu.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:54.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"munqu.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:14:58 GMT","end":"Thu, 09 Apr 2026 05:14:57 GMT"},"fingerprint":{"sha1":"6A:99:F1:85:CC:D8:22:79:6F:D0:DD:FE:5C:D1:95:32:2F:E2:B7:16","sha256":"B9:B5:49:57:04:3B:FB:AA:EE:33:D0:37:88:81:75:D6:74:67:6B:60:A6:35:35:36:2F:1E:EE:BD:62:DE:1E:65"}}},"request":{"raw":"GET /sdk.js HTTP/1.1\r\nHost: munqu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:54 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=86400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67929ee353ae33a20623802af145e92f","sha1":"5ac9f7207bdc0605f9f1ce358b2447ba0ba5a88d","sha256":"c94fc61cbac5c3f0996c0ed21a3d52b51574627c0554e2961a088d1b36bd1801","sha512":"f7aee32369bd8ebd257702eedde4ceded40e714df2a56e3615b5aa1b2b17afc03f367d10aef98c58d7857184c10ac92c88c38e27719bb96e1db79cee775d4a91","ssdeep":"3072:wIRnSeJOivsMVRpAz0IKgEStWm3OSfXtiacbdP9GXwVZVuB:wI3EMVRpA4cESwaOSfXtiaYdP9CwjVuB","tlshash":"99f3d998b19272a01e735534712b864eb6a7aa60545e4980c0dbe1f23f3707fd3b7de8","first_seen":"2026-02-06T21:14:27.809293Z","last_seen":"2026-02-06T21:49:19.068093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/get-rtb","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"POST /v1/get-rtb HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nContent-Type: application/json\r\nplacement-id: 19038\r\nproject-id: 4669\r\nx-version: v31\r\na-pl-id: 21308\r\na-pj-id: 5140\r\nContent-Length: 113\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"user\":{\"user\":{\"id\":-1,\"vip\":0,\"language_code\":\"*\"},\"platform\":\"unknown\",\"version\":\"0.0.0\",\"start_param\":null}}"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\netag: W/\"25-jLKkh9f9it4eiXgjgmylL5+KDlM\"\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c609c0bcefd33409a8188e1eacbc7f4a","sha1":"8cb2a487d7fd8ade1e897823826ca52f9f8a0e53","sha256":"c18ddb07285f5e8b5a528a9440a27b820757be7074e67dfa6807ba05eadbe485","sha512":"988ee5f0f8d9be6f0ea5ad4e178a12df71de5570b1151808ff442f5c27f9ab8e9f8fb140ff4619925bbcbc9bd1a2ee9fd66063e6d7dd3d3a3c58ba8ad6ae88f1","ssdeep":"","tlshash":"0780002020080e28c8c02000fa002332aac00808280a22e08a8c08af22e2a83a88a088","first_seen":"2025-08-16T15:28:34.694417Z","last_seen":"2026-05-16T04:06:49.699718Z","times_seen":12,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9c9ddaa138b756af-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1383537\r\nexpires: Wed, 27 Jan 2027 21:48:50 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1r5ioHzeBKw7TN7Kl2EivRfHhLPOWvkCDS5u0%2FRC2qgSqKR6y3QTIsDpVn1aA0%2BJ3cckHcgWAwOzG3TSeZDdXb89mM7buXRRSMTgiIZD3hBnImrP6AKZSbwtLxv%2FuDrC3Q3fMJae\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-06-13T18:35:43.39058Z","times_seen":51541,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":23,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/401/10334865?oo=1\u0026sw_version=v1.788.0\u0026oaid=x1ne938643em451348522u0b2khrz825\u0026tgp=unknown","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:52.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"POST /401/10334865?oo=1\u0026sw_version=v1.788.0\u0026oaid=x1ne938643em451348522u0b2khrz825\u0026tgp=unknown HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3396\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3396,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkEVkYLASoQTktDAFhGTBkCRExXAwkfFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQX0dQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSAVCT1lJbEYeRkNZWUBQABUbW1xCSQddCk8NCR8UHhYfSk9SFEsJVUNQXkdQWglPDQkfFA4eW1JHVxRLF1tDUF5HUFoPHRUDAhpYFA1KT1IUSxxPAAZMUUIYTAVUGwkHVkYdBVdYCEVbSxUeTFFCGEwOX2ZcVBBGQ1hZQFYeJk4FSFRbXhYBHlRJRhRAVFVKHQtcDRxXQ1BfR1BXBjJYW1lpEwodDQ1AAllVGxYDADQZURceaFVWWB0QEUpPUxRLGlYNBRw0FlEeGV8bCQZWRg8NGwZXG1sDUUZMDBNZCx1WXUAUQFRVShsOZwcVSkNQX0dQVwEBWEtsURsJDBxXWAlFW0kHBkxRQhhMDkRQEQxKSFsLGRYaU0kVQwAdG1AOXkEVSV1CWF5IRFcSVhsaG1taQkkCWA8ZUVZBWyUAHBwQAUwGCxtbU0JJHFEdTw0LCktWRgsBV1gaBRVPDBoHGxcWQk9FTxEMWCkcGxRAFEsLSRFIVFheFhoXWBsJBlZGDh9XWAlbQQlNSBkDUA5fXQUNHxQNDQ5KT1MKUUkVQx0HA1AOX10FDR8UDRxbUkVOGh4AG1taQkkbTExXBxURQRwHW1JFThoaGFFDUF9bQABCT0RREQxLVEtcWUBLHlsDUFhWW14WHQxAGwkHSFxJRFcWSzYdXBUPDR8XUExXBxURXAkRGEpPQHUGA1ANBg9ERxpeTR9uWlgeCw4bVSxsSUgJT1pVSyVdAFsDAhNOTFBCSAcUAlhKDU9aR0s1UQ0GWBYBBktUSVlFUxgvEEsEDAETXQVdWRkJERpYCglKT1MUSwldQ1BMAhxACx9ZWF8bCgAfRQMLXR4cS1sDHTs7DwcDQ1xBWBsIVBgRBBUfEFwWDxxRG0c+JAxQXUIfFhcJGU9IDR8UFwMLHBdGVAREaXoNEwoNDQcMWQVUSQUMQx0bURkIRQNaRSotQgEbFl0bF1gNRx4PFBkYBFJOVkRADQo4PFkaRVtRCAZMUUMYTBheXREMFBEVBFlAXBsfG1tITEdQRAJPDRtbQg4UClJaTU8eDhcAGh5FEUINHVtYSkUKDRdGDRtCRlsVQwQJSUgEQk9DQxEMWDEtK1dOGgcbG1tbQkkcVR5PDRtkXxRXS0pZQEgdWwNRRkwOBFUCTw0KBBpYDBpKT1YARVtdDEhURkMYTB9DTREMV1VVShYKZwYbU0NQXkdQWhlPDQgfFA0AW1ITA1QaHBVDBR0IAkFMVxV1WlgPHFkQTVRnX00bTUgGAhZQCwMVA1VXFhccRFcBUDYWWws1BwUWURZPDRQCGlgTEAYqCV0QCmYNDwAMBlxMVwUOBhpYBxYEGhBnDRxJFQJMUUAAQk9BXF1SFRZbUldAFEseWAwPHgoWR0xXBxURWBZGQ0oQDBU8KhtNSAAHARZUT1JXHmMpSBwGV04aChZVDhgxDBNZGxkVAxFFCAMbSllASA8VG1tITEdQVwIZFQNIS1ZGExsFQAJYVRsRBBpJSARCT0dXQVVYXklEVxJUCA1fDhgDNBZRGghUTVxEWF4CShwRZwgXXRMFBw9QDggMW0pWGlgNCjcBEFENHFcVSFQNE1gdCBsbWkUlBxEaGg9RHBRmWVwxBABrAAhAXEEUQAIYBAYHFEsQSj4JBhkdWQcYWhsJUBsICg1ZQFEaJlwFDQtJSFIPAURcHxQTFyYPEAFTBlsDFRgbDl4WBx5oTlZUJQ8QHFdYXggVSgRGTAIBaxkIVWZYXw47T1hDPVcbJlcEHQsZUA4IDFtKVhpYDQo3EQdLAg1WETUdChRVHAQVA1VXFhccRFcLSzYaURMFAwIHWTECR1xBV1heHwkZEV0UVRsPDx1JSBZcWwINBw5CUUpdV04aChVQBAQaNBtQTFcVTF1dFAsOBldOGggfXwgGBwoGUTEEUxsJFFhIWxwHA14PEFo+GQEeAFcLMl5dEQxYRlVKFAZODAtNCBkLGS1dCk8NGxEaWAcYBQUDUQ4XZggOTFFQFkJPVExAQhUJJgERPQlLQxtDRkwIB0caAlpmWlIlVltSV0AUSxpVCAkFNBtQTFcVGx8UGQsKHFdYGktVGwwPGgMdUExXFVNAQhsDW0RXEGccEF1DUExJXhYBDGhQVxRARltEVwNcDRBNCAUACh5rBwlEGwltJxk=\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.app.cvcplayspin.xyz/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":0,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: application/json\r\nx-trace-id: 3016d676d0cf68cf567986f3cb95cce1\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=x1ne938643em451348522u0b2khrz825; expires=Sat, 06 Feb 2027 21:48:52 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4838,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0080eac597fd071d83fd6c2bd527afeb","sha1":"b5f56d319890660d6c33acf7d70fa745c53a385d","sha256":"44b76068277cd9baba61b05ca51c8ce747c0551ff4a9ba0ee079a624af4bcf21","sha512":"8daf12411305124e6ea87ac5bd145c09b29459f28a1eaeb34ad46a9a35c00b5682a5a399bcbdb12c2513fd4adca335a925fc60e9ea3c2594f5389cbbd80eca81","ssdeep":"96:griPtp/ScpxCsoNNriPtp/ScpxjsHi3c63cG:Isp/SgMsofsp/SgtsHovV","tlshash":"fea135084d18057a82de5ab9ed072e471abd062f390c761ee7894d57b0efce513eb10b","first_seen":"2026-02-06T21:49:19.09191Z","last_seen":"2026-02-06T21:49:19.09191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":78,"dns":20,"connect":26,"send":0,"wait":76,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3rem.com/500/10396669?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"d3rem.com","domain":"d3rem.com","tld":"com"},"ip":{"addr":"139.45.197.114","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:55.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"d3rem.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:17:05 GMT","end":"Thu, 09 Apr 2026 05:17:04 GMT"},"fingerprint":{"sha1":"5A:C5:A2:51:AA:EA:FE:47:5C:C9:D5:5E:42:25:F8:F0:10:42:E8:0C","sha256":"7A:94:C8:AB:FB:88:CA:F7:B8:C4:46:03:FE:DA:17:02:A9:B3:65:68:E2:8D:7B:D5:36:86:5B:FD:62:B9:AE:CC"}}},"request":{"raw":"GET /500/10396669?excludes=\u0026oaid=0802d5bc6bb748c0f164d54ddd1e907b\u0026tgp=unknown\u0026sdkp=1\u0026of=true\u0026sw_version=v1.788.0\u0026dmn=munqu.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fwww.app.cvcplayspin.xyz%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: d3rem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nCookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:55 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 88dc1a1c58baffa8220a629f033dba2d\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.app.cvcplayspin.xyz\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802d5bc6bb748c0f164d54ddd1e907b; expires=Sat, 06 Feb 2027 21:48:55 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15295,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"d629bf61647498ccd2cc867f5461795c","sha1":"862b8c5a58ad241cf093fbe537787c221d005a4b","sha256":"54898a2d8c31d5d34448c665f77700f2632f2ffc8cabe178ab5180ec83e82401","sha512":"1223d89654030abfd9d1d7f1ba0e5c4f2ae5d8e52a0db1126e8f3e8c1bdad9d3709e720e0ded9684f17f9725b05ad86f18de556f7bbbdee94366d60781879549","ssdeep":"384:JCrUW2UgmsHyGZpeKf3LjD+7Xn+9k3kZc9:JCrUW2UgmmyGZcKPLjD+7Xnyk32c9","tlshash":"fd62b6dd3781c406d4c36f1c6b321e3ab8df2d094ff548cc765af66542ae0b809e668a","first_seen":"2026-02-06T21:49:19.092648Z","last_seen":"2026-02-06T21:49:19.092648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid-net.gigapub.tech/v1/get-rtb","fqdn":"bid-net.gigapub.tech","domain":"gigapub.tech","tld":"tech"},"ip":{"addr":"167.233.14.196","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:56.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid-net.gigapub.tech","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 07:57:40 GMT","end":"Sat, 18 Apr 2026 07:57:39 GMT"},"fingerprint":{"sha1":"B2:55:C9:E8:B5:CD:81:E5:70:03:67:78:D0:3B:5D:61:F4:B9:57:CC","sha256":"CC:18:EC:61:18:34:20:CD:03:2F:83:C0:85:10:F8:0C:7C:A8:D0:EC:88:11:EC:EB:FD:5C:D8:33:1E:6E:18:72"}}},"request":{"raw":"OPTIONS /v1/get-rtb HTTP/1.1\r\nHost: bid-net.gigapub.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: a-pj-id,a-pl-id,content-type,placement-id,project-id,x-version\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nOrigin: https://www.app.cvcplayspin.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: a-pj-id,a-pl-id,content-type,placement-id,project-id,x-version\r\ndate: Fri, 06 Feb 2026 21:48:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MRZLZCTDFE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:50.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-MRZLZCTDFE HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 06 Feb 2026 21:48:50 GMT\r\nexpires: Fri, 06 Feb 2026 21:48:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146068\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440300,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"eb6ef311d86e5d5d2f5164bcac8699fe","sha1":"f930c3dbd76343784371dbd7658a06d679db8aed","sha256":"4acabfefaae73ee04a1a3f0d131d69617539385e67064d82d2ab1eb343a3ddfa","sha512":"48ff4a8aa6791243adcaecadfbb70ca7c445a4e599f5fc52b08f3e122d9a92c263ce7895407c83586322902dd85f9442a08e70ccff3a05e4d59a6026f5f6fe49","ssdeep":"6144:vIbh3hDHzzfR681qbOqR51/48BjM3cp81Qj3AEFytI10KTB:wbh3hDTz56nbD/48BzFy4B","tlshash":"b39419de73c674225396e478502f018ba57b28a2f48cc89af189cce42d74a9a4177f7d","first_seen":"2026-02-06T21:49:19.093527Z","last_seen":"2026-02-06T21:49:19.093527Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":32,"receive":24,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@tonconnect/ui@2.4.1/dist/tonconnect-ui.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@tonconnect/ui@2.4.1/dist/tonconnect-ui.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 21:48:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c9ddaa4db0d7131-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 268872\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 21:48:51 GMT\r\nlast-modified: Tue, 03 Feb 2026 19:01:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:XFR7HzZ/jVHDvBVFUUujSJGaRMNZSN0sehOoSn8tb/U=:\r\nfly-request-id: 01KGJE35ED2MJ5TWVC8RGXBDZT-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f20a035fb3be74dcd6b3a8982b3e370","sha1":"e3d7e9a056f592a2ff399fb7117efae752ffe4c8","sha256":"5c547b1f367f8d51c3bc1545514ba348919a44c35948dd2c7a13a84a7f2d6ff5","sha512":"95447864c1f2cc25f61732cea78bda9094335718b117b9da9ef7ca44b811419b7a294868a8a3c9e65aac9471adff54b5be9777ebff720014688fd914f4b0a504","ssdeep":"6144:1h59SKz68jbJiVnec/yCXwVxwWJ7aA4bxEwsOX6333oaAzWr9Mn822RXzLvto6b9:hrs7aLVxmFxEwsO8tAaqnz2Rp","tlshash":"d5944ac6b3d2b16027974bd940774522f3391dba380884b8f76d88867e705c9d27bbb9","first_seen":"2026-02-05T01:06:43.235214Z","last_seen":"2026-02-22T22:16:32.988145Z","times_seen":13,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.giga.pub/script/giga.bid.release.v31.js","fqdn":"cdn.giga.pub","domain":"giga.pub","tld":"pub"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.app.cvcplayspin.xyz/","date":"2026-02-06T21:48:51.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.giga.pub","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 11:31:29 GMT","end":"Fri, 01 May 2026 11:31:28 GMT"},"fingerprint":{"sha1":"96:91:60:11:73:D8:51:20:4A:5E:B6:A2:EC:4B:A2:8C:9E:EC:54:72","sha256":"8A:B2:FF:10:81:CE:CB:8D:25:52:2B:AF:6A:19:A5:2C:01:81:67:18:EC:C3:5B:DA:B1:6E:EE:4D:3C:CB:0B:B6"}}},"request":{"raw":"GET /script/giga.bid.release.v31.js HTTP/1.1\r\nHost: cdn.giga.pub\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.app.cvcplayspin.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Feb 2026 21:48:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 106383\r\nx-id-fe: sto5-hw-edge-gc15\r\ntraceparent: 00-f58e44b3e921ae18d9d93bbfbf761de5-955cec7bbafc6b7f-01\r\nx-shard: sto5-shard0-default\r\nlast-modified: Thu, 15 Jan 2026 08:34:40 GMT\r\netag: \"6968a6a0-19f8f\"\r\nx-id: sto5-hw-edge-gc15\r\nage: 219990\r\ncache: HIT\r\nx-cached-since: 2026-02-04T08:42:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":106383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65523)","md5":"32f08aa55c5f3df00f878106a00fd310","sha1":"97608a5d89cd8d25eb397097b2183e1d10dbd43c","sha256":"2b325a8f38935cd3b375b021459ba0b8b98b250894565e959167b6c11896cb51","sha512":"4aa6f971eff1720a4e267ffab3c826ed3c54a52916c55cf13a56fdaf03442c11a2dbcf9996d469c33454a529944b24ac63d7fa61c6ed3e5d21c15ef11846314f","ssdeep":"1536:qD337Y2qQ14NweYUdLdPdeyfOjobyO67GWlco9UHw:qDnk2qQ1kneyGjdNou","tlshash":"0ca30e9c7f01e62d958596ff2b384489d8011f09bdcc47ddf799f826e5a8227a87c30a","first_seen":"2026-02-06T21:14:27.811599Z","last_seen":"2026-05-16T04:06:49.723302Z","times_seen":4,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":50,"dns":21,"connect":7,"send":0,"wait":9,"receive":11,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}