{"report_id":"a3978d45-abbd-4cf6-b936-da31560bb7ef","version":6,"status":"done","tags":[],"date":"2026-05-17T19:29:35Z","url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"172.67.188.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"title":"Vegas123 Agen Slot88 Terbaik Sejak 2019 Proses Cepat \u0026 Terpercaya","dom":{"size":40932,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36989)","md5":"b1b93e95f47102727925866b62a2daaa","sha1":"c0af810457ecd7a4f342d4bd82fe85910c6ab1ca","sha256":"c142a7daac132f764e799010f7bb0e57ed0ccfeb7ded0bfe52da6fc82fe94c88","sha512":"9447cd7364cb3111f70acbd3225a93947763f6dc551200eb80d3b05a7acd60ef5943bcea417dea94579f987ac7877cb5fc6be8ac3a1553301c56ec2015aea8eb","ssdeep":"768:doM4hWonUGctU73MUt/HM4EzF/jamzRI/1peq1sp0Pgy0T12HY0YDw:h45UGctU73MUt/s4ujXOf","tlshash":"d10313f758b0191d50234a28cfe59a5a432cd453a8346efe7347191bcb8bb8c63ae257","dom_hash":"domhash1f4ad847207e0161a528df0f12b6cea4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"172.67.188.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T19:29:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-05-11T18:38:24.064557Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"res.cloudinary.com","ip":{"addr":"151.101.65.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2026-05-11T11:33:19.596677Z","alert_count":0,"request_count":1,"received_data":73002,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.sportnanoapi.com","ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2018-06-26","domain_rank":1797884,"first_seen":"2019-07-05T21:54:51Z","last_seen":"2026-05-11T04:27:25.185963Z","alert_count":0,"request_count":20,"received_data":106940,"sent_data":9580,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fkupon.com","ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-04","domain_rank":0,"first_seen":"2026-04-17T05:54:40.927007Z","last_seen":"2026-05-17T18:17:17.746785Z","alert_count":0,"request_count":3,"received_data":50495,"sent_data":1391,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":8,"received_data":238918,"sent_data":4499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.files-text.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2023-08-09","domain_rank":89437,"first_seen":"2024-04-10T05:26:58Z","last_seen":"2026-05-15T13:56:07.891172Z","alert_count":0,"request_count":1,"received_data":27393,"sent_data":562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vg123moon1.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T19:29:39.490886Z","last_seen":"2026-05-17T19:29:39.490887Z","alert_count":0,"request_count":29,"received_data":3437814,"sent_data":14471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"img.viva88athenae.com","ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2026-05-16T20:13:09.668293Z","alert_count":0,"request_count":71,"received_data":1481309,"sent_data":32971,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-05-11T15:06:33.160609Z","alert_count":0,"request_count":15,"received_data":1067996,"sent_data":7201,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":2,"received_data":39774,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.livechat-static.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-05-30","domain_rank":339953,"first_seen":"2017-12-15T05:21:49Z","last_seen":"2026-05-17T05:45:16.717557Z","alert_count":0,"request_count":2,"received_data":745836,"sent_data":958,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-05-11T23:17:38.741265Z","alert_count":0,"request_count":1,"received_data":12871,"sent_data":664,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":9,"received_data":802246,"sent_data":4416,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-05-11T15:38:27.732155Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ik.imagekit.io","ip":{"addr":"54.240.174.124","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-01-17","domain_rank":153981,"first_seen":"2017-04-02T12:17:08Z","last_seen":"2026-05-14T13:44:59.562036Z","alert_count":0,"request_count":1,"received_data":10888,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-05-12T05:20:23.641415Z","alert_count":0,"request_count":4,"received_data":24176,"sent_data":2497,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.DqOOgqcp.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f0c0e484aa4031715ad7825e1631cf4e","sha1":"16c9a791acc08c90a4fa206259a699a4a209d928","sha256":"e23e2dfee6d222c7ca1d4ab88af3b2276a63aa5df0fe3bb9d79d955815872b57","sha512":"1d6c831251cc4a42ca2c4ff7915f78d05ea70de68197feb43cfbf8b6fc9921ccb1b957e5f9f7af356ef274e881d1a8d569b34f004f0c39d29d5fa842b71e88d9","ssdeep":"6144:f3X8OEQ4KFjvqBOtt+ODfiYn/EoSU7kIS9BRIEer1F9gzBAFi/OiMwj3kRgxx15V:PtGeDKOtt+ODfB/EoSKkIS9BR7er1F9m","tlshash":"d4544ce4b352ba3cd7e7c2d690ba1609f33c3d59b42a5764f1ad9c0e3395448833ab64","size":304436,"data":"","first_seen":"2026-05-15T07:12:04.834552Z","last_seen":"2026-05-18T10:17:36.617372Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c5dd8e07ab2aa7b83e02dc4bf193440","sha1":"fd20251c226f88ee9aea54d933f529087580b608","sha256":"a1f978d318bcde06be72d489bf706927cf87fb04fa8bdc10570ff42e086fc0b8","sha512":"e458418e143c493a9bb6580540fb48a864d907f7831070e217929c907c7b59c324b5fc4e160c70c5d73b6911bcc94ae71962db510e450c1f31f85fb976f24fcc","ssdeep":"","tlshash":"ae112b2417b10220011af6469bc95750623c415fa444dc1e7d6d569a5fa2f1a12fceb9","size":944,"data":"","first_seen":"2025-02-14T06:27:47.014565Z","last_seen":"2026-05-20T17:43:43.055864Z","times_seen":2126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535e065fc4023a5b83ac59ad739ceec3","sha1":"85aceda883b231d5a8c7e11a29d93912e199f9ed","sha256":"343ea09fb9e954fa1383ab01432325fdd0c3535a78cd2d677d7a4c0879b51274","sha512":"bb2965db9dff79bd8adb3d4fce7cd426084312bd6ebb4da71eeb5c0e14e67672b1eb52711daf2c22520eb2917453601497269c670734c6e68bb20ebe01491e3d","ssdeep":"","tlshash":"5141c52af1db0dd34037ace22afa8b503b5841576447c6123ebcd94d6f63d1b6c634aa","size":2197,"data":"","first_seen":"2025-12-08T08:31:50.012227Z","last_seen":"2026-05-20T17:43:43.056592Z","times_seen":1094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e24cd4027fd12756a57cdb78073fd94","sha1":"d5eb9a3cabf3e395c6b766362e10bc9d84643471","sha256":"ab6d1b8f4bbb70bf0fe7823aaabc13ec4817af63b044af510f93a59160f70c3a","sha512":"05dff25ef93890dc8dfa78e50b260568a21980607399aed8ca84a88335c07ee3e14b7f85d6a0780fa3500d1fd95c5ec0f4b7cb21060d3c1db323f78f052a1ec0","ssdeep":"192:zdLXEAB7K0tHXdFVEm/38KwqgzLDXV69LVSyQgkc+HXSixyeNfuUMc+28fzmJZ63:zBbttEm/JsbgHuQkPS6JE8rI6/w","tlshash":"f062ad9975b3706b4523e0fd4bdf8016a3248817210ccd44bf6c9706bfa6b64cef5a9a","size":14822,"data":"","first_seen":"2026-04-22T19:05:46.433207Z","last_seen":"2026-05-17T19:29:56.108849Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=1471.0.3.196.56.22.2.3.3.1.3.54.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"136ea2fbf9ae741155c361f085286347","sha1":"49baeec4259c196019e5a8c0191ea5efe11ba828","sha256":"5b6153e9f977474e2a7ae1582c90fe64671a2655be9947de975ec2235b44e421","sha512":"d5e39565c8456a546480b44a6265cdb79dd782a829e62cda4d83090cf8dc0d6b711e3b9886cdee7c0ae1be28fa24f793347958d619a389e8a71b7a2dd0181dbe","ssdeep":"96:uhUsXhUAbhUwhUS6qa51Rc7rGIfplKt017OYr/1PJ9F5tJuN7imGSmTf3PJvzaq:uGsXGAbGwG/qd79ROw/7YiHSmLxbn","tlshash":"71d16725435fc47b73b7915a62cb770e340c517db5f8193be4a0ca70a1861c7d302eaa","size":6175,"data":"","first_seen":"2026-04-22T19:05:46.367366Z","last_seen":"2026-05-17T19:29:56.078384Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.C5kjnOh8.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"268ab9b7755be54d87255e044ad5e395","sha1":"988cce9466245135b2de92c2e1b47341663f8ca4","sha256":"4c3dab309d55b21ecd7f25872bead1131f109a52b26fa5bca8507ef627d2984b","sha512":"16fb0c3ba594c904503984ed7b0e1fda39a5b72d6924229d8ce76338346c340f9fa7dddf92d065865b358f266ecf3b2134dccbf5d9a81f300e73cdb4d051d140","ssdeep":"1536:GIrqgq37RvTh1mmHPW//sQE8QOe10qS3+wX0t:vENbh9O/TQH10LNs","tlshash":"5b433bdef181743167e715f2a07f9002b73a2a2c385c81b0f629dd9925da04ba277f6d","size":55782,"data":"","first_seen":"2026-05-15T07:12:04.840916Z","last_seen":"2026-05-18T10:17:36.592454Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.BfJowA_0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f527ece77b8358a5d39faf5bf69bfcc6","sha1":"7cfff67026312e6c8ee0c2ab1ff774797adf8c43","sha256":"832a0b053ec1ca42d99b01eefbb8b1b2ba73c74eba903a7d736c797100965f0a","sha512":"4c8298995f0846ebc40a2982745b25683a8d466b324f5723141b4b3acf48f1fd47d0c8ad847d08793c0db30681fb4336d7b200aabd821db680bc28ad7f39ae9b","ssdeep":"3072:FdmtYfmF2FKLbB/57O5CxGWZ2Pfp8kE5MwfMH+rUqN8v5iNRawF3:TG+mt+5CR0Pfp8BMIrnciNRj3","tlshash":"ca146cc4f18ab93587eb34e2587e1002f63d6d18b44c8160fb5cdeb639a518a9277f2d","size":207172,"data":"","first_seen":"2026-05-13T11:19:36.784802Z","last_seen":"2026-05-18T10:17:36.499843Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","size":20322,"data":"","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-05-20T17:43:42.883243Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4434b133d07794f1ccc6a43e1974db04","sha1":"f70242b35b72cf83277447f6fb561b415da4cbab","sha256":"60153c5b27067a5fde46b6b605f3bf23a8b16e2a835c8bd12f7f4bbbbaaeaa43","sha512":"9b3fce4cd97fde5577760425c5b85975927121bdabe973b4ff20c856064b653c1231dcf7f722107ac01cffce6d732be821342e6a1c9d3c97be1b5ce06caae689","ssdeep":"","tlshash":"6ec09b5b637535314567657505eb41643420d18b15055c1d3d6cc7724f33a550f96a8c","size":181,"data":"","first_seen":"2023-06-26T19:27:32Z","last_seen":"2026-05-20T17:43:43.057949Z","times_seen":3075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd7e0833aef403f37abcdd1d66c4b1c","sha1":"d539ed19ebbeca865ca22f79321a168af8a03eaa","sha256":"3fac436a3114068e659b8252400a9afd15ce216b82b9646c5093223106a0ed42","sha512":"9be8166d7ea506fb927aa4f608a1a14c6946d4fb2b5bceaec0bc3d16eb2960ba02eee2374b0f5c6d0ceb2f81b0f3b57b1fcde42faab1091c2cc0b4f5a5f3447a","ssdeep":"","tlshash":"26f0a35d3c56f0573bfa3535c2278f6f3765070175839524c646cc3468554861856d8d","size":445,"data":"","first_seen":"2025-11-01T08:31:13.849982Z","last_seen":"2026-05-17T19:29:56.110765Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-05-20T17:43:43.009278Z","times_seen":4981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-05-20T20:44:30.343391Z","times_seen":17136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.BkPmegIK.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3fb8103b1c47a3c17730d845e4e1e7fc","sha1":"4a04ad85e28141b7706ee724ec3eff494475e372","sha256":"b236405a130bf73e46ed9bb149600b23ff1652a570be15d3b217a64c801ae024","sha512":"dfd21d15f709896004a6e88fbdce600685f3fce824de8c16618ef9aeb2042bef64c722b48e79612ecd355505bb5e5f6f3426220d8429f1c87d22df2f1887f37f","ssdeep":"1536:VL9gUh9CvquGSVD7dfXkQAXB30qOFex8nHHvDZECnjMWWAGYUhWd:VLqUh9CSu38QZnvFvQWFpUhWd","tlshash":"14d3f8e83951f9616bf302a710af5807733c292b680d4960a211fdddb9b841eb17bf9d","size":133258,"data":"","first_seen":"2026-04-09T11:23:51.32121Z","last_seen":"2026-05-20T20:44:30.399718Z","times_seen":3887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BLfmipM-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ca051985baa53ec085ebd9096d8fa52b","sha1":"0d227a057674cd49f399305704e6255013253725","sha256":"6d1b8f21bad25678c322a949ab887efe69bbec0181b323a0c2c6e9656e5137de","sha512":"55017b6de24d72b94b86b6b8e32afe8088b2941b6fde446d384dd755cb030a78df916a26d0265245c58f6d7a870b4dd0bb1d414c2d9c31cb610a42f122a8a3f6","ssdeep":"384:5O9SGx6PSW5gcJkswSEQR3eEyHVqqcyOtlcLDhlQCaG5ENcecci5EqYHM+p:5iSGvW5gmDdt8qVyOncLDhlQNcecD5b4","tlshash":"1aa2f9ed3192b03443578864406f552bf26daca0b88d4c40a166f1e1bdf8efd9773ba9","size":21459,"data":"","first_seen":"2026-05-05T09:53:37.889339Z","last_seen":"2026-05-20T20:44:30.401041Z","times_seen":1530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd50cef7694fd226fcd8391820425c0c","sha1":"228234ab124b69978282130f4daefb6d5a0d2017","sha256":"2028a8d4fdbdad3e6d5b4f040c8767b21bf172486208575db7eb15e887a6cbcd","sha512":"ca3d474992d2cfa7f3861b0776f6bb411bdc39b24b18e1b974245fdef8a3e752250f796775875e3ad2f8bf5251100903f31ffd3bfb05ea60e6d782f1e4c21875","ssdeep":"","tlshash":"16f0a39d3c57b06737f93634c2279b6f33550701b9c35524c645cc2468545c65886d4d","size":444,"data":"","first_seen":"2025-11-01T08:31:13.85072Z","last_seen":"2026-05-17T19:29:56.11139Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"157c72de87be0c8daf13f3cc4948f18c","sha1":"6efe257e13665682424bc7e0713dac1a5da3b7ee","sha256":"5a3ec5d4503fbb1ea9f6aadd984ff9008be696fb9ea19278c31b67f61240df17","sha512":"312be5599e0eaeaf77077ea9276e29561f810fbf6e2ce8af0f9639940e64ef11241c92eaa9103192fba55d104ae825e5dc9ef34f5190b834eb2dcf390859f9c1","ssdeep":"1536:EFmAvdDrij5ZJC9/YcF4buegHEBEKX5wp4Z0F006FHLF7RbacQ:EwOdDujHsN4bdgHaEtt6FrFhA","tlshash":"d3a349d67282b03453f789e7a1bfa212f3396918340e8410f17cdc6a395a9879177f6e","size":104098,"data":"","first_seen":"2026-05-15T07:12:04.856747Z","last_seen":"2026-05-18T10:17:36.478609Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.Cjs2koNL.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b3aa3f5e63f74659c72f033c0a08d203","sha1":"5034c82b17829b3fae932829e66eacc514a21b61","sha256":"4c91abd15b043f7a4c446cdbbf5a3d37c9dd8b9e3de43dfc09f14daac1ecdeb9","sha512":"1fbc302c9591aa2b686e563adef31bc8d65656bf08a6368c6f089eb6ab2debfd228e4c1eafe7812d0d06ff3a2b1f015b61f8cb07d52f8c817455b1fd54a5e292","ssdeep":"1536:J+3CuFrKN1Mclp/ItXqD/KHEps3j33Kj7lUbJS+WgqLA:I3BI1fp/INh0GWPl4WgqLA","tlshash":"26731ad1f295f5398be7a8e551355103fa3a7918782c8170f32cce20315e686a177fab","size":79623,"data":"","first_seen":"2026-05-15T07:12:04.947565Z","last_seen":"2026-05-18T10:17:36.554322Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.B8U2wfjY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ebfccd5b0556b7f3700937c434234f92","sha1":"f1949fecd9d3b9954310b0d5bd5beb75282a71dd","sha256":"6d43875cade9d2b3a81eef3f3ddecac90ea8bc3ee21691a4da98e70df41fc13d","sha512":"e1d6a3a833081daf449c93907ce27802e37c8e19f26baab07e756094a8f7d75958429038f5f7f20ab28731fc777a54fb96c5b08c719390f78225996e5b53c77c","ssdeep":"3072:vWCPJAo1gbchIp5p+P8fiCkC8xMQbiHBmq2/j6/j1JK1rbaf7B9RBg:eYVgoq+8fiCkC8xMQbiHBmq7JK1rbafU","tlshash":"67d35b943282f57087f39097a87f530bf2b92d58b409d930e4b8f4e975e4146e1a3fa9","size":135409,"data":"","first_seen":"2026-05-05T13:06:27.407961Z","last_seen":"2026-05-20T20:44:30.353807Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/jquery-3.6.4.min.js","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-05-20T17:43:43.022389Z","times_seen":3231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ad1ee46ae242ce2eee6175be759f395","sha1":"ce25d81f1f98af65ab39b3bb8d0d0a30e538a19e","sha256":"01ce13ad7e35bded813b32fb01ea6ef33f782a76633699aa243149311c99b961","sha512":"30d219ba2d532dcc93f923da0ac24cfaa785ac7d52eb157ca886b644de05315fc88f93be84834397d002c54c9dd859aa5fcfa84d4b2efc9d397895248eb05756","ssdeep":"","tlshash":"d6014c3e0422497b896f1159f968b2b4b9d001e89c42c40f445ecc0fe5a4de22c6bf3e","size":718,"data":"","first_seen":"2025-11-01T08:31:13.851466Z","last_seen":"2026-05-17T19:29:56.11201Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97b62c7e390c77cbbd1cbc5950e2a489","sha1":"60877b15dc90ca13defb3051ba92761e808d81e9","sha256":"453da6735bd0d5e7ee0a96d8193436f5e2fdde7d90c0ded2b6a39fbb090b772e","sha512":"f53df4d7991c7b57bfb0063a4c12a61347e4f5718a847eb134123d40dc0b26e66576cfb7401f4f03ffd1381ea68b7d4b4aef62815925b0dd6b93219ba5acc648","ssdeep":"","tlshash":"9451ef7af9930c77a9db21b947fd100c747466778809de0c352c5a218f3fda8609dad8","size":2459,"data":"","first_seen":"2025-11-01T08:31:13.852304Z","last_seen":"2026-05-17T19:29:56.11265Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-05-20T20:44:30.375117Z","times_seen":28535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.D20fknPD.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8abcfd6942bd094a9acd4b5baaa25920","sha1":"5b102fcba3feea9b649b78cb3e930fd6e1e6d72b","sha256":"d6930c65835d81ddd304fedce8516d146704d27ba7042420da85b15729ff2f0e","sha512":"9e698e2b58a1b2ac080801d4382afa6b56b1fa2b09df4a424c2bf015a8a91e2369c231d09f75eae8914634ee1fd59f1ee9e6d7480717ee7a4b22e3e1b6c4f8d6","ssdeep":"192:Hj7LbrRc33jyJybQI/rsGUWlKZfZwxlcz7X5tXqjdEUyVqmh3q/La+UFkn:D7SjyJykcsGUWsVzt6dEUyVqU3qj94kn","tlshash":"8ef10abff381f4b1a3eb94e0991a0103b9390655756d8070f62c8e54a16e6c4b277feb","size":7900,"data":"","first_seen":"2026-05-13T11:24:13.340271Z","last_seen":"2026-05-18T10:17:36.469884Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-05-20T20:44:30.469017Z","times_seen":14965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14434575\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fvg123moon1.com%2F\u0026channel_type=code\u0026jsonp=__5xi7d2u8jac","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d757254edb1804a731f9ed0f3180aed","sha1":"59de3c506e8ea8b06d48ea6bc3bce6fdd23dcbae","sha256":"734c9a098283d94d64a8c9d31a635604cc4abbff1c256e48009725ddedec372b","sha512":"7aaa1530d0c1340cc88f20a75de74f30d73eb78d703c4d4c719bcc30a482e771c56761a88ed3789dec2daf62c5f7c489498bf0d539d0c11916586f2587e19a1d","ssdeep":"","tlshash":"6de06827b1491a22dac1f3a8ac20ae46fb7856b26109646e70aa3302a71f7cd9731117","size":388,"data":"","first_seen":"2026-05-17T19:29:45.529718Z","last_seen":"2026-05-17T19:29:45.529718Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bc22cf15e1401bb7991907c287437c5","sha1":"6f012391433edc843444d741fe8a0bc2edb65973","sha256":"77fbff7adc52561e17b4bb0802bbd307e7967824ce06b454b78415a5c1f9b198","sha512":"5c6eae54426fe7c48bc15736019db63020e11bf9cb4376273cc60daf9903239a53cacc36daa6836de0ffceb7e10603d04b77b6928be04855515ed5109fa6c5c8","ssdeep":"","tlshash":"f721db72d164963201a3c8e9aef7072d35c5811bc8038a8a7bfc479e8fcae84fd71180","size":1437,"data":"","first_seen":"2025-11-01T08:31:13.853033Z","last_seen":"2026-05-17T19:29:56.113758Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f21d71b4c5150ffa30581da384ce775f","sha1":"29d6b5dadd5b4eaa6ac83c4607385054dc8682c6","sha256":"8de506fa4027e4c8dab1b8efb0712049ff87187093d7959b3df0bca02cd3b5b8","sha512":"d7eb09bc819647778598be95df74c55a6f93544c2bc7d2383043f9d9de559cbe299f05fdb1ac9833d860dc13e1ada7118552f21bb50c70d2beb515049d23cc39","ssdeep":"","tlshash":"fc21df65d1479d07722bf4e4b4501786b2d2832bdb03092cb1ff52a69bcac3022562c7","size":1402,"data":"","first_seen":"2026-04-22T19:05:46.446345Z","last_seen":"2026-05-17T19:29:56.114308Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/new2-webduo35.js?v=1778935083","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c4e6575a2244de4704267b70c0d7ab","sha1":"55c3917ada6d548f15eb4395ac4858d2f61539d3","sha256":"94c8001636010089dac9312b1edb120556ad4e55e14a0497b78a3882ac49db72","sha512":"2a4afc432a780be169028d5274813a4d5a52d98c99eeff5aa6b1efde9bde19a5e178e9bbc6c8b8b13416f50c8cfa1b884a4ca1b0829a2681c7e81f82e8557545","ssdeep":"1536:LlNm46JcJAvMZrFhPO/CD7eJe3eNeyeiC8iaWiAQiI:u4sEAvMdFlO/CD7eJe3eNeRiTiPitiI","tlshash":"8e33424afb4c4a8f47f327a488378145af1dc835e20b4b05fabc48887b5a6557371a6f","size":52029,"data":"","first_seen":"2026-04-26T09:11:31.857142Z","last_seen":"2026-05-20T17:43:42.872518Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0419f582b3cc2e2f94ba17465be23b2","sha1":"c6c439a964e0cccf12c8f1244e3d71869a0e6636","sha256":"7df87871e7addddba1edc498a5536915ed76678b8a44da7aabf0f18bd5e3e836","sha512":"5359093923abf1675ae6353affe22670e7a46563f3186a9c711ebca5c4c5dffec083a9a513d45889431b1c77d677c41b4dcb06be552df6c81c17aea90088b818","ssdeep":"192:KNCMFC3C3CyH/LlQltMvKM3q+dY4NLAL4h6yb6SAKk:x4RAkh6g6XKk","tlshash":"a1e19b1835b30029c65730be67ff5914346cf10bbc81c948ba6c8a1a5fe6d9df4b669c","size":6944,"data":"","first_seen":"2025-11-01T08:31:13.854784Z","last_seen":"2026-05-17T19:29:56.115412Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"980c2b050c2ed3c579bad7eaeba57f1b","sha1":"49c8cb6a8588f771418b013998e9b5f52163d321","sha256":"e7d79562cf36735f40826738f21901f22cde71719d36c0048873f08156bcc5b3","sha512":"7c342eab9dcbefb57c3e451cb6948a742229cfec539a45236680fb10dd0314f03902ec33877d584d9a3692087454dbd568c21698107031ba94e98fe8becc4ce0","ssdeep":"","tlshash":"8401bd89bc467076aa963628713bfa07516312296854683359fec7abef32d97410368c","size":747,"data":"","first_seen":"2025-11-01T08:31:13.856216Z","last_seen":"2026-05-17T19:29:56.115958Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DoTVWiIk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"51631d2332e1df22d82571c7e946e0c0","sha1":"17dc0cfb8cc2f12c0af7317249f76d7bd42a1d98","sha256":"0c00564efc472ac5256d4ecd6da6b6160b3e5caf3df20225417e0f3a55fbbfe6","sha512":"eadad76d853cc88d81c9172cb859270862192812b48731d6871fa3d2722e266936cfd9c40578f0cf2ec6bd4903b599597f7407e7d04e03e94b79d017e7b9eda5","ssdeep":"96:HHW1MDMDY5x1pnq9kuOxmPkkXFcQCux3MpfR9xllUSvnVDtPVWFt6ida+Kq92rSb:nW1MDMDY5x1pn/mPkkVcQCFNl+SdDtGr","tlshash":"52b164cd37c170b756b7a0e5087f9006722db5403cadd410c224f8e57e6aceaa1dbe2a","size":5298,"data":"","first_seen":"2026-04-09T11:23:51.371548Z","last_seen":"2026-05-20T20:44:30.473681Z","times_seen":3886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-05-20T20:44:30.494547Z","times_seen":27706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_1b4250cad04cdb145f4866af24cdf301\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9118ae2efffbe0182fa7233e94894846","sha1":"61b4967e00fb55cb9f8a16ea453bd723ba9521ec","sha256":"8425705e29aec5d75ff1616303a9e3b5c9b01f4ef0781911a0c6f03937106906","sha512":"58d836289876e356944b0f7edcc67b5dd6ab1dd93faa8ef38523300e6ce80142a806239b29a1967413382ccbaf3110528c6d7b6c65aa434ec6ca9c7fbe8edfbe","ssdeep":"384:kwODwsFulAqVUr2V9DCKlFZmERbo1DQCBuLdAeA+qSJ0L:7ij642VvFAnHuJASIL","tlshash":"f972c9644dbab96e0b1753d6f9db9d1d2cec33646b441a2f9e844f3002c17c1736aa3a","size":16379,"data":"","first_seen":"2026-05-15T19:11:21.51654Z","last_seen":"2026-05-17T19:29:56.031685Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/jquery.marquee.min.js","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","size":9052,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-05-20T17:43:42.778141Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fff970a0fff14aff414dff2f6b7cbe9","sha1":"27f04b0b5ed5287faa7ea3eb726568fa63e79506","sha256":"af7a9f64ddcd32eaba256026c63c069de707dd88d389f05dd14b1b7a29ef1ace","sha512":"49b4bdd2d013b720d8ed2a023f9c162180ff278c281dc3792511da598b32c1841191b2e8a4515ab620c7cdea738dd21066f51ddeb862425aabf2edb2c83f1afd","ssdeep":"192:z9w28Od6wtvIEMViKSNilCMio7ifSWls0Zn:xuEmun","tlshash":"27f18b2e41b71972487361f99b8f244431765003700dce9a3e2e5b016f96a2d9be2bff","size":7827,"data":"","first_seen":"2026-03-24T07:10:15.087251Z","last_seen":"2026-05-20T17:43:43.061979Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"175258ff814b5c134ca0b32510211fef","sha1":"05236b3554ba1892e75e67e470f737cfede747c8","sha256":"b6450ab77a8c1e141fa15f4a469340158eb7ae036cdc48b21441463d83fc3bc9","sha512":"fe0358972f7ef32bab67c76f6ebd6da18427010c5d7b5d123bc2d2fb6157b2937142a38d1578b250b4452ea7517cac27b0b34abff68c095d6cfb75bb78a8155e","ssdeep":"","tlshash":"2e71ef1af25705220acf69be27e3078535b08447a504ca073d2c56656fa7fa7263abfc","size":3758,"data":"","first_seen":"2025-12-08T08:53:31.349411Z","last_seen":"2026-05-20T17:43:43.06276Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c81891ef60048b95fffb09388b3fb9a","sha1":"37a2e6a2ddf2c167d76c99c00e462217db98fbac","sha256":"796293a49df90e523a223fa53e26e918604ae8c106d15e2f67d6c6b640b594dd","sha512":"2cc9e8755b471fbbedbed7b5cdc48bad3782d730018e0405e1e750a366376db49d4a7d89b5fe41349b0e23873fc8ea49b2e607ee5e7669b1ee65ab07f28506e0","ssdeep":"192:2ueuH2zVnuKYEgYkGN35ZyhquNVaLrVaAt0+Y:BZHOuKYEgYkGN38qi","tlshash":"63d1312eb9b310b6a973303d5baf550839725603210bcd347e8ea1984fe8816565efed","size":6208,"data":"","first_seen":"2026-05-04T07:28:25.48929Z","last_seen":"2026-05-20T17:43:43.065913Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/14434575/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-05-20T20:44:30.520116Z","times_seen":26499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-05-20T20:44:30.520599Z","times_seen":25121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.1vdvOulH.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a8fda3642e2ba9b25e3f416feed07dd","sha1":"d1dc52ef887451929924b389017706af55f6c273","sha256":"223555a74201b2fd80bf1e4ffb9c51fe1a90270ef1db767217631bb1ac020435","sha512":"4015b0a57c9bcd5a089b8ba031da9f3476781d606f9668a43d784a1ae966ff92f72d3a27ff3660fd0d570002642e48102e6cff4c9cd42982472a87a8a7d507b7","ssdeep":"","tlshash":"f6e095cba20039e3f299dce5c454d0a266f697964be083b0c1cf137153a0126ce14946","size":432,"data":"","first_seen":"2026-05-15T07:12:04.958033Z","last_seen":"2026-05-18T10:17:36.515786Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f019525d7f18765da49790b50c596c8","sha1":"bf0636ac88d8261b66c8d2a3ebd7854ef5bc9c65","sha256":"946900f415921308cdcbb465e2d1087a0699fe07668bd54e340d2214708bccdc","sha512":"9c564dc235c9370fee96d05e9ad8cb0b29559cacd4c0530578734db14a9615fffbee4723fc773e1f15b497006264b05b00e17da7f4a832ad202c884390749414","ssdeep":"","tlshash":"625142384959093110b3a17e6a6b8345a3ef905b141dec20fe7f47905f4dc1e47f19ab","size":2937,"data":"","first_seen":"2026-05-04T11:21:45.436093Z","last_seen":"2026-05-20T17:43:43.064408Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebd306f2fce1a14724bdd8d927e57b05","sha1":"dc5722ee8eab2fda0454d8ea5ee81abd113bffd9","sha256":"cfeaaaf6682eeb487937f4bd551c2b3b759ed125bb70ce1ecc929b09b4507319","sha512":"86257e2df7705999de325f8e4b03c89ba2e15b5bfc50f0e7f8c79e83936606f77997a20e91d40b0db10dc8f0742e41f5252afb16e7481b315c9b2a31899bff3a","ssdeep":"","tlshash":"cef0d8af36a2202581133257af5ea80c306790072545cd223eec85816f90c363b39f6c","size":489,"data":"","first_seen":"2026-04-26T09:11:31.990522Z","last_seen":"2026-05-20T17:43:43.065119Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3c144b883a3abdbbe71701ebb0e66b","sha1":"9a6863582eebab6a5c00391ef8a37b3afa855945","sha256":"26ded8f2b1b53d104c738332e3ede0dc27518fe9aba6ecb67be692592f02e88a","sha512":"e0f0f98278b181b703d238011b3e8828c6fe283659371d445ebcac8ab548032e7c32011575d5584e9e1f1b28faaf457febc3105f135548494d44953d07a4587a","ssdeep":"","tlshash":"84b012dc70b9e10402342b80495b415c341e500e310e3cb3104c0f48471045400c5118","size":90,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-05-20T17:43:43.067408Z","times_seen":2072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"5779d846c3307b20cf408e482bc9df76","sha1":"d7caa5c54ac9164ebccf16bd063c8d7a3725cf5d","sha256":"52782046af93ab709a34a3d27ca390c21d69a53f4d9b37f6ad30aef956fa564d","sha512":"180da039cd89ff4d70bac8dbf4f407cbd658d2156754f4ea2e5c22c33eb82565f5be2a5e86c29b85037a37fa4f96ae20f30ca1f84b736f6cffab6dafef56b401","ssdeep":"192:TkC2WszNVInD1c+C7VdX9kXjLMAOghWHSI/12HUZ0HVf/7pfM:7RYVSjLtOcI/1pif/7pfM","tlshash":"8ce1322f416113298027dd684bf467138178e8667c6d77fa25136a29d7cbf8215e338f","size":6962,"data":"","first_seen":"2026-05-17T19:29:45.642897Z","last_seen":"2026-05-17T19:29:45.642897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dfb41d5f1d4fc237b6c3f498eae86a72","sha1":"76b255bb99b684d9ba37371126d50cdb53fe5e3c","sha256":"b533fb4dc503d9efa6d4dc67dbad84130258d7c30245009ffba19f2b00906cde","sha512":"57e09ade8c03404a2b7186d789f11ac70cc2c7f9dbeb62b156783335199a619f3e71ac8506216309b0efe5b6b8fe41dfb611b26e2b80448c1f5a4184a8ee5df7","ssdeep":"192:TkC2WszNVInD1c+C7VdX9kXjLMAOghWHZI/1NHNCxHEf/7pfM:7RYVSjLtOXI/1K+f/7pfM","tlshash":"ace1412f416113298027dd684bf4a7138178d8667d6d77e925136b2ad7cbf8205e338f","size":6961,"data":"","first_seen":"2026-05-17T19:29:45.644639Z","last_seen":"2026-05-17T19:29:45.644639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1ad55bc527b291f610f80295122e8e8f","sha1":"8df908622b91ec764dd40d8e862718a1d5d3e800","sha256":"8270ece17ec54d06e32ba41712ea16b16620d08c41b030e0cea6bd4e4b3d4ecf","sha512":"94d4591e382dc5b4ee797649be5b6a192d813b45131657a4bab775400d73c6da01c1e536f6eb39f7c0e20e056440657ce75a5dbc8278172cb690adf97877ff47","ssdeep":"384:7RYVSjLtORTDTM4hzTJbaLxJ/aLnUGctU73MUt/l6Is1SLk4C5a11GWf/7pfM:FoM4hWonUGctU73MUt/EIs1SLk4C5a1c","tlshash":"40b28af65cb01d2d50234b18cfe59a99032cd582a8746dbe734b280bcf5ab8d73ad257","size":24209,"data":"","first_seen":"2026-05-17T19:29:45.645605Z","last_seen":"2026-05-17T19:29:45.645605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cda6074424c61e6950bce57503cb8043","sha1":"ebbde19e0028f837ea88f8bf0abbc072b7a08a0b","sha256":"e4d8842c00bf56b5533922bb9461d64b385c702906646120dc30c0c4c9429275","sha512":"2416383ce48545a831308ac89b3f61c80fa614488f2bd4c8a9d55196b837bc43ac54b3468f87b2cf54a123480978f1adb935c31028ac4b0d69ace2e3fe6c85e6","ssdeep":"768:FoM4hWonUGctU73MUt/HM4EzF3ID40T5+lnYsSV/1NQ/9fM:p45UGctU73MUt/s4hV","tlshash":"05f223f758b0192d50234a18cfe59a9a032cd452b8346eff7357190bcb8bb8d63ad257","size":35647,"data":"","first_seen":"2026-05-17T19:29:45.646717Z","last_seen":"2026-05-17T19:29:45.646717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"981ce258eddb1bd65ec54c01ae1e447e","sha1":"ea2117ff0191f416d36d6cbde41378cd739f41d4","sha256":"612a41b5cf7ddfdfa4b8810b0d73b9fcbafd788ac8a7ef9c1efe44c305df8ccc","sha512":"28e1ab90913ab9fcee3eb0bd3cae0462504d9067106f1d53429505d017d6610c7e8302ba86d099665f9fff1da429e53f9e10847128636c051817698e0fd1dfd9","ssdeep":"768:FoM4hWonUGctU73MUt/HM4EzF/jamzYI/1+eq1wpdFg+0TajlnYlTV4:p45UGctU73MUt/s4ujX+GN","tlshash":"f01323b758b0191d50234a18cfe59a5a432cd453b8346eff7347191bcb8bb8c63ae25b","size":41740,"data":"","first_seen":"2026-05-17T19:29:45.647839Z","last_seen":"2026-05-17T19:29:45.647839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"03d2a557b1ad01353c6f7e3882aa21c2","sha1":"8977b5a1f60342c1473a8170dfafbb4051ad227c","sha256":"f70093965e27d07e7f2d6022110839cf6a77952276c1d6ca8f4dfb5305732725","sha512":"9f64b9e32f21ba336583c75f98c4d2afcb0f33059a4c5383aed937433d1a82502ffe1aaf8aca3fe7f29e9530b3c1d70021f94035bfaca9915d1450497323418a","ssdeep":"768:FoM4hWonUGctU73MUt/HM4EzF/jamzbI/1Veq1DpdNgA0TadlnYSpCTV4:p45UGctU73MUt/s4ujXGzDT","tlshash":"ca1323b758b0191d50234a28cfe59a5a032cd453b8346eff7347191bcb8bb8d63ad25b","size":41741,"data":"","first_seen":"2026-05-17T19:29:45.649563Z","last_seen":"2026-05-17T19:29:45.649563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"vg123moon1.com/css/old/template/RP.css","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /css/old/template/RP.css HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJdR0hT9MrGe4l86Sr63eJeSHxheJHdm95Foc3JlgJ%2BZb8uZEBG8x9SdlKeoDgh2Pnc32aZCQm%2FxJBHpQf8%2FlbpmmGZXrmhtU82pXbyjYiuZzF2bF5CJtoxaYR37VacyCw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d1fe656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eebcd814e52fbde659f9340272cb5fde","sha1":"6679f9c75043fcef08a2420079d6e76d96df5e96","sha256":"80790b7cf2a11dc283dd4b0bffe49806e3333749d6a50701993f7c4475ffb52a","sha512":"eea210f82047ba4b49d48121aa865dc07e1b6388db22a9507ad5e68023f9892f9e5b841372af39ce077f025dbdbca04047ff71d4c225ebc966b61de829606025","ssdeep":"","tlshash":"dc0126589c8a4066e13b48bf33f9a013f670744b949abba5fad85030af39414393a881","first_seen":"2025-04-17T03:11:32.470825Z","last_seen":"2026-05-19T08:06:57.609192Z","times_seen":92,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/dnmbvxfnp/image/upload/v1757095121/FAVICON-1_hwhab2.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.65.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /dnmbvxfnp/image/upload/v1757095121/FAVICON-1_hwhab2.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"df4fe17c35885b4c3ee31f0a5ad5eb18\"\r\nlast-modified: Fri, 05 Sep 2025 17:58:42 GMT\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=4;cpu=3;start=2026-05-17T19:29:13.591Z;desc=hit,rtt;dur=14,content-info;desc=\"width=256,height=256,bytes=72231,format=\\\"png\\\",o=1,crt=1757095121,ef=(17)\"\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: 3f96d53c839427cf47e2bf7b816f4f9f\r\ncontent-length: 72231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-05-17T19:29:56.035375Z","times_seen":131,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":10,"dns":35,"connect":13,"send":0,"wait":18,"receive":17,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=2OS3sXmoFVAWUllDRy1ZYcMEVyvKW89QBriiPez6OIU-1779046151.3044517-1.0.1.1-XMa7eRLcvYK3O3XQHv5EEjkdXGMyUfHCNQCtuhb_7Ggkvcijt7lb3W74ukV6cybVFfbJD6182nn30rCbFR5kEh52kT8bjWgL.VPVb6fia.utOnkFP0arSHLlOHLuu_zb; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2565\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1279\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f0f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-05-20T17:43:43.024072Z","times_seen":2894,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206164915.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206164915.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 485128\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:49:15 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSFQ3yFB8SH%2Fk%2Bj72cu71%2FX3LfObbI47gmNGXlij8Dn22%2FY20ml974jk2yHI0keOuCU4ULm1I3WWJjPeNQHBQb43ViYKq2nrUyEKfuSG8y423MqfCHd2d8xAEmim2%2FiPYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"0440947c58fe63acbd44bbf4ae674880","sha1":"236e6fa32722c8937a4d522c5a1f231bc3ca81c9","sha256":"3d226c317e076909505b96308f1fddc2e4bd0ed825fb9802789dd06ed6603465","sha512":"d36d0bb33fedd83c991aa80405efb7fed7f1c381dd6f79e1cda53d8b41440f173caa6ca6278afb5b0702c6313370732ad1007c7e90766bf7a2b9e61ea29a54c2","ssdeep":"12288:w3MWqvNasVVZN0Zv5W9bjV9mUDH9ZnNbcRb:wM3hNNAw9bjV9mIPn1cRb","tlshash":"c5a42339b358f0494eb26b61e9f02015785a6ea0362bf933644fc9d2e973fc06693717","first_seen":"2025-11-01T08:31:13.78658Z","last_seen":"2026-05-17T19:29:56.090965Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":827,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-25.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /banner/mgl-25.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=kPk2QzWaCsWstXiG2LnbkKrcP8uVRvBcw8wf0UgMqV8-1779046151.2974048-1.0.1.1-fGAAvQgl_Otxxd5Y5R4sWVrfX.rl0BhlEN6zdAmqLP6zqlelK6lB2WaKBSj1GCpQOHLaxnaiz42Ks3DLdSEg8uQXlXHjamCt0d58IZ6XiEcW7cm7Gn72geMWMOiDXF8C\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 536201\r\nserver: cloudflare\r\nlast-modified: Fri, 01 May 2026 04:54:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 4200\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5079408a456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536201,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"90ec36a86bb834d45648de0ea935d0c8","sha1":"19494c098b59b44d0b322d68dd1fa9e4435237bb","sha256":"5242ba1f4a4f5c600caf2c07cfcbdfb03c09ff7ec0225a8fd09b68e0165a503a","sha512":"100fd6311d902248b2960f9e3c2eebbab10a57022ae6ea9165e99d09cc492ef9fb723693c3691d223716b0fccb28f25edafb19c6ec3cf7368d209fa4504c2796","ssdeep":"12288:6mWodLuTwqKISE7nG43IX6boG295FJhdYH7rTxp6XZLjNJY:6mWWuTwrv2G/qbP2zFDmr6XJY","tlshash":"9eb423ddee51e50fd5c9aae5c2e70762e73f43ab1802e03e68a465a0504b9fd307d272","first_seen":"2026-05-01T07:24:33.791023Z","last_seen":"2026-05-20T17:43:43.047123Z","times_seen":284,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14434575\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fvg123moon1.com%2F\u0026channel_type=code\u0026jsonp=__5xi7d2u8jac","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=14434575\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fvg123moon1.com%2F\u0026channel_type=code\u0026jsonp=__5xi7d2u8jac HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://vg123moon1.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://vg123moon1.com/\r\ncontent-length: 388\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (388), with no line terminators","md5":"1d757254edb1804a731f9ed0f3180aed","sha1":"59de3c506e8ea8b06d48ea6bc3bce6fdd23dcbae","sha256":"734c9a098283d94d64a8c9d31a635604cc4abbff1c256e48009725ddedec372b","sha512":"7aaa1530d0c1340cc88f20a75de74f30d73eb78d703c4d4c719bcc30a482e771c56761a88ed3789dec2daf62c5f7c489498bf0d539d0c11916586f2587e19a1d","ssdeep":"","tlshash":"6de06827b1491a22dac1f3a8ac20ae46fb7856b26109646e70aa3302a71f7cd9731117","first_seen":"2026-05-17T19:29:45.529718Z","last_seen":"2026-05-17T19:29:45.529718Z","times_seen":1,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/css/old/new2-style.css?1778935083","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /css/old/new2-style.css?1778935083 HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 10:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvM%2FtPqaQW0pcVmeHispe%2BWkpeP3e1EMcPMDVw33uQRR%2BI2kHOFQHB7a24hJywY0rAN5G0o4TDSyf9Bi%2B3j4VNV7ShoWEplUMIHPx%2BfnT63vLyzFhUOagiJsyRcDISlf3Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d1ff156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01af7e767be5b793b9def25cc5708367","sha1":"f5e928588d0ac5fc97ca65be366db7e5a6a0c375","sha256":"9ecca6a6a96bf6f13b2f733e8ee84c4f6868ecd00a76eb261133bfba42128fbe","sha512":"34ba7ffe63b61df1052c6fdfdc759abbb81b4cdd353d890f0891f449ab718be1b23c3fddf748604d0a8e4bf2f188d451888b759dcab1857e61eb2618ca852611","ssdeep":"192:WoVF+jJSouRa9q664vDL+TRl4y5UCUmQkGyMA+AHFtzTFB5SbbewonOlnUAdhwj+:Pf+gxwq6691fMcDKTVf9rA3v/JZKow","tlshash":"c392736dd512209a2633ebb4af750b19e7698023cb06626d3fdc62844ff22799161fdc","first_seen":"2025-11-19T10:28:57.246484Z","last_seen":"2026-05-20T17:43:42.965206Z","times_seen":1342,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/f378eb1ea04e53999b89051aa3244de6.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/f378eb1ea04e53999b89051aa3244de6.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 10 Apr 2026 18:18:12 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 104754 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 6655\r\nX-ReqId: MTc3NTg0NTA5Ml84MWE5YWYyYl9CNTYxMzRENEZCMzU0Q0UwQTBGNjFBMTI4RkM5QTA5NQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 6655\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 2986724\r\nEO-LOG-UUID: 4453899850108033658\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6655,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"894800af7ee350e68b701cbbea210acb","sha1":"2c61594c5086a6d187a62e7142bdbdb54e202e66","sha256":"d8826ef190616891dc9b711ca4d1687c2402f4c8bc2ace919741955e73d02ed7","sha512":"01683ab3717294fd515ba753a54a3704c076b6275af53d00af610c114132bd4e514b263b7d05f6a1b0e33a96e7c590e898b6f13028e789b9e849b5cfb94907b1","ssdeep":"192:+aSY5DtbXdITH9dvl8rqdNsu2QCqpl/Tsu0YT3N:xDNdQ7yiNsu2Qppl/TGYT3N","tlshash":"b4d18e7b22183d02e7140bf82d75cd9179c28734baaa42d382e5252764ee979ac5ca85","first_seen":"2026-01-18T17:04:34.575829Z","last_seen":"2026-05-20T13:35:44.437713Z","times_seen":111,"resource_available":false,"data":null}},"time_used":2141,"timings":{"blocked":998,"dns":440,"connect":19,"send":0,"wait":22,"receive":0,"ssl":659},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/widget2.php","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 05:48:39 GMT","end":"Fri, 03 Jul 2026 05:48:38 GMT"},"fingerprint":{"sha1":"22:AB:76:03:C8:31:31:EE:D3:61:07:16:3B:FE:5C:33:43:95:DF:6B","sha256":"9E:A1:0B:BE:9F:85:A9:C1:B3:FC:37:B5:62:99:56:37:EB:0F:1B:CA:3B:83:50:CC:CD:97:39:7C:DD:FC:A4:F1"}}},"request":{"raw":"GET /widget2.php HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhR0uaL%2B8rJ5MLvgHtCFdBuYAvF0z6BrBQ7KBSXUDfMElT3YOpXZQ8cpWtIOICUl8aTHtb%2BQTPfTeyd7cb7R17%2FkkwkLI9PdPKg4sfaWKEPbWVTxap%2BUpD28afGa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fd507990885b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15810,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"463b1f954e94aa48697c70a038361581","sha1":"875da38c1a46dd8656b27470d3a911ba448097c2","sha256":"21ce9d135b5a0b9044d27747c8896ee55b30e75a8113510dd69db75783681ba4","sha512":"41f7aa0f9377674b936620ed1a803d90034bdba74da2f8f78bed813f5c601bdf6ca61b6dedb526617c098301b8629d2c344996c065fa2727b48dc90137724cd0","ssdeep":"384:+uUAyLG/PICPE81sPhfzB8sYhJQey63ew:+JE6NzB8sYhJQey1w","tlshash":"f2629265d903146a693251589f27450dfba682038703571abffea0d92ff09ebc229fdc","first_seen":"2026-05-04T07:28:25.423462Z","last_seen":"2026-05-20T17:43:42.994133Z","times_seen":208,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":192,"dns":35,"connect":1,"send":0,"wait":363,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ZVqhrESNPl_af71aEQCDy42guuUodaA_0bqgDaY2kD0-1779046151.3115695-1.0.1.1-dTpU1cr9xCQZnAXzuL4e6spb_XQMB4tTsGjaZGc6gnFxKWwkdJyqg__YNHua9dUrj4sreJ59jMtgWVjT5y6zJB9KVxJ1cvWmh8Gl0Cm.y4FcrjmBLmJpwsKa7Dngz66s; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=2880\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 5358\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf382efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-05-20T17:43:42.829369Z","times_seen":2842,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/83a982f8219a768e7cd29d1ac765b199.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/83a982f8219a768e7cd29d1ac765b199.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:53:15 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 43888 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 3425\r\nX-ReqId: MTc2NjYzNDc5NV85OWE5YWYyYl8yQzA3QTAxRUQzMUU0MkY4QjRGRERFMTY5NDE5NzAyNA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 3425\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12411358\r\nEO-LOG-UUID: 6407165199898800816\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3425,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d3be3aab95a290a72f9c9be5f49010d0","sha1":"2c7606758e9690d126a3d1dfce178239162d4265","sha256":"bdf9dbef407c0b95df8ec103ad66dba08511f95c06eb4960f57b647eeb9698ea","sha512":"1d17ceb7b9189d932b1dbd6d862921ead57a9c7cd0bfcfc616d81d2a925f46b5eb9b530ce9f035d8ff757893ae780d4e23fe3fd7066d732b8e62d356759bcea4","ssdeep":"","tlshash":"35616a51632e4e58f4c80132ac7a2126108ca34273fafe8644897f12bae5a397a12c4d","first_seen":"2026-01-04T14:37:28.497822Z","last_seen":"2026-05-17T20:22:31.779083Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":594,"dns":438,"connect":21,"send":0,"wait":23,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/b8c5038ebb0e21b09a72008b7cb6219f.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/b8c5038ebb0e21b09a72008b7cb6219f.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 04:01:59 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 108027 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4884\r\nX-ReqId: MTc2NjYzNTMxOV84ZWE5YWYyYl8xNENFMDQ3MUMzQkQ0OUJFQjJEODMyNEY0NkQ4MkEzOA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4884\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12410834\r\nEO-LOG-UUID: 6972774314742368977\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4884,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"88473f1baf42fa13bd433c9f5ffdb44a","sha1":"23fcfd8a0548ba9a55ea0d5faa58f14e51d58a15","sha256":"07ee4c18c327c15c87edb6d2241cc658583c888c5a849579602c0c9fe6a863d3","sha512":"451c2ee8134dd5a48769f7ce3eb0f1d2a0979febf739734f65419d1dbfcf72fb0a3f26384a8b7d00e13bb015845e55c4545e71a4f0c36e4c10dca230cb986387","ssdeep":"96:+ajL8gel+6Wz7b89uee68C8qHA5//wr/C4J6MnWrT/3GHHMW5:+av8sbz09ueehr5ADC4Yl3/3Qp5","tlshash":"71a18ee911341aafd825447a0e4be4f7aa74b1b03c9ed156680a35ee0e7078b05d6f54","first_seen":"2026-05-02T07:53:53.641447Z","last_seen":"2026-05-17T20:22:31.67598Z","times_seen":25,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":639,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:03:56 GMT\r\nexpires: Sun, 16 May 2027 15:03:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102317\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-05-20T20:40:13.974291Z","times_seen":10572,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":377,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=486MaLaVLNKxSHhDdSjzhi8y5d3_ohLEC1tYl7I9Gdw-1779046151.2983518-1.0.1.1-LQs6aewhUl5rgqDolBF5kCd0Vww3J31f3GWmzprXczylSVEmrrjlnYfZE9dFdPs2IRNF4pZ_Qj6omVcqFgjZNj5ltvw.N0vikXLWTs282UaOYN1bpm.HZUa6hKjvdLhu; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1284\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 1279\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9eea2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-05-20T17:43:42.763465Z","times_seen":2344,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4280\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 06:08:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=0olF_fI0K8p7KiPhx6bWnB0SZXjCZsRFffQGhBU1Ngc-1779046151.3143973-1.0.1.1-cAzJLNzQivrCelOXtAGVmY8PBsMwCFIwC4nPYntt4igsKyxdosG7D0ZPd78ce6.kWzon.ZxxBzJBp4RQbLxDfVEhMpaqF9he4q1MVrYZ_WOdg4srkQLiyOuk7McreRAT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=5926\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf592efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5c94e134973f78a3abd09f8ecaaa1a7","sha1":"b079718fafc29f5496df6186b28ed6aa4e8000c6","sha256":"de1ffff913bd404be635b1f1fafa41fb2f83e65ebef63467adeade423d491315","sha512":"f6519ea55de5c7b50edf0ce8292964fc798d4397733c19048e769f9de89c8ac5ca843c8544f4d9a1c8f046049df2f6bc6509af0057a76258158206780130ced2","ssdeep":"96:OC1l25Lw1FSSu4F4GR0hyjDxGCMiKmfLPCiKjf9S9Yy:Rl25Lw3Sl4RRRj1GfiKG5S9S95","tlshash":"70917cd24d58e0864d78194b4dccfb38405d143e4d955fe3261a47fc02bc2c0612edb2","first_seen":"2025-11-19T04:54:17.138379Z","last_seen":"2026-05-20T17:43:43.0429Z","times_seen":1406,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/lottery.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/lottery.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=FUI7y02HxdaBCG2KZWDMJ1BF_JRzaJukRpjYCoA9NY8-1779046151.3159223-1.0.1.1-4lSLiaNApXDSCd8BFkuQbkgAlcjigFZ0QhxKjBeFhfRyIfCTx.vUPGaOQHRr75j2XbXsFSERR45haD40uKXlP4n_si_wZWHF6weNCkjfx6_yVXu0Z5XD9M_cJq5gOfQP; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4258\r\nvary: accept, accept-encoding\r\nage: 2006\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf6b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15c0c4be6639d6ec9ce5ddc983f2c4f3","sha1":"9e541e491ca202d9d0aa9e0b61d01198eccc9eb7","sha256":"61a773aa166745eb9f86d91f71494d72866355dc9d1994d3bfa7ed76a75a183d","sha512":"715c171b747e44b894b63e9c97688a0d2f85d3dad63ed25bf019fc59cb987d7d25b35452b974221358a6f6663ae284823b933a61bac6bdc9fcd115734bee9e29","ssdeep":"","tlshash":"0e11c85683756942f06f7942fd6c932848b4dc147247d4a79bc2060bb1fc2dca301578","first_seen":"2025-11-19T10:28:57.308418Z","last_seen":"2026-05-20T17:43:42.957521Z","times_seen":1342,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEi4nDHfFXFU1E1DKyArQiQ9ocU8c1mzP50TPP9EoO2JE9wktJo7K8pt86twU2_lUwcw3-M6_IY\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1778828604221610\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-05-20T20:44:30.375117Z","times_seen":28535,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=oOvsiTKe_Z4x_LSfw70pPAqmuoB.LTW.AJDfzoBjp3s-1779046151.296041-1.0.1.1-7RSrj51KcFb332VXIWdePUsutyCg_VU3lsVNr_BjAl.PChfegnR8DXdKwe87fk1Gt0h4AY9hBRPJ07B8SmP6bVX2gkjeRuyEv2pCEIEi3Gh7KvMbmDyyG3MfeJDHlVb4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1401\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ee22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-05-20T17:43:42.896352Z","times_seen":2118,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=ma6zauelUbKeUBFwFuo43lZUyFiTZDV1POIH3gjHDek-1779046151.3156412-1.0.1.1-.itmEYWFbK40FVZyaG77W.obWI48eSfoUeq_YUWgloFq4g5SiNM42imWP7Au6LZrf7KvUzeAPGwyotr8M9295MOyeNdDVhOnaQgEe41MO88XQBIdEBBlkeHxaQxzIz0j; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1402\r\nvary: accept, accept-encoding\r\nage: 6628\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf652efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-05-20T17:43:42.837202Z","times_seen":2438,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=5zXj.dmEw7Ce1R5FH78e7u2QO_Q89vKtT.9RGFmWvVI-1779046151.3173351-1.0.1.1-eFMH5C2nBaWW7sBJJubupuOtDzKxfvIeSglp0Fq0OUzV6LeSIxxAIjYisLvosa.ezbZpWGzaF2K7DDH47fWUAIstffo3Gmri2rqSOgFH6RsUiexgSyRkRPEJ8kezpRe.; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3751\r\nvary: accept, accept-encoding\r\nage: 1571\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf7f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cabc944e32056660a317f51dcf4c8c70","sha1":"c2bcbfc855467f946dc5fa5b3b562e8895c7b4c6","sha256":"7969b5e6f41c00bb28d7882e001bc3859f49337dcfd9e3b2ab5209e63ebd92db","sha512":"cf590ece4a8161e48e395941c5046acdbea89c6fb8711599297aff86cce1d2617759b5b66e93c10734b4e33fdada0f24e3b126c23c3cec482170c66960d4b09b","ssdeep":"","tlshash":"f2f0418383f44326a600b0d457554504084d038610756b7a7f963c454635da8ee4430c","first_seen":"2025-11-19T10:28:57.237919Z","last_seen":"2026-05-20T17:43:42.815005Z","times_seen":1352,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=MUHT.PNEcw7fg8USrCx22VYbFmfv0Hq3SMY7955sHpE-1779046151.2946622-1.0.1.1-JmpMf46kYHMAs1_IVABh5cfixH2wbBpwW5BfN4Fh1WI_JuxZwR4.J5Gbr9gWM_Ibh2OeJXVqv6IBCGEpg08ldfelGs4CyFvWJ.Wm5gYhhtaBYxHDQWjc3yIaocSym_jF; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4064\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2527\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ed22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.73708Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/8fd50a53dad5ea4fd2d32bd3ce727f58.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/8fd50a53dad5ea4fd2d32bd3ce727f58.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 17 May 2026 05:09:25 GMT\r\ncontent-type: image/avif\r\nx-svr: IO\r\nx-log: X-Log\r\naccess-control-max-age: 2592000\r\nserver: openresty\r\nx-qiniu-zone: 0\r\ncontent-md5: j7ke4ZBG93u+3H6LXHlQwQ==\r\neo-inner-image-stage-status: inner:0;0;none|upstream:746;39381;none|compress:48;3656;none\r\ncontent-disposition: inline; filename=\"8fd50a53dad5ea4fd2d32bd3ce727f58.png\"; filename*=utf-8''8fd50a53dad5ea4fd2d32bd3ce727f58.png\r\ncontent-transfer-encoding: binary\r\nx-reqid: QrYAAAAvYokhQrAY\r\naccess-control-expose-headers: X-Log, X-Reqid\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 3656\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 51562\r\nEO-LOG-UUID: 1383105532096330694\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3656,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7ae31a9c66827b3994c4f75388cee905","sha1":"1b75ba890ee865d6376f0a7bab582b1dc5a3b4ae","sha256":"66ce1a2dfe166593ae436defe9d8a3c3cd21b19fad965b38cad724388c4b074c","sha512":"12081363b0a0afae5bdc580cd5eacb01e1fd053a4ec2d848d77802cbbaf7132a327f915ab7b631de9173ea21effd41df3f3a13f06334e9bd8faad8f64f8bd97d","ssdeep":"","tlshash":"ac713b6b23de1622dc9c9f3905440367e688fba91687182369c1750c87b8af4d536652","first_seen":"2026-01-04T14:37:28.718094Z","last_seen":"2026-05-17T20:22:31.711124Z","times_seen":36,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":702,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjXrqJVB0Vg7pwkQpWl8VIWac4rtTXA-GVhyaLjWtq071kl2QUMX1soj0yt3w5JAnDadFM3pmS33MvTuJiJ2R2j6afJUaogsSjHAfXm98DwsMfPle-CEkbqqZVOBGBVLJcJJMlElWpZSNrPdgoT_x5dPSYLWtv2hLEwEZHtvd3iUxOit7eC6S_XygH3as/s320/google.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:29 GMT","end":"Mon, 13 Jul 2026 08:36:28 GMT"},"fingerprint":{"sha1":"F6:1D:5A:51:DE:25:95:B3:5E:84:56:4B:20:16:2D:FA:7C:86:D8:7A","sha256":"56:38:34:58:D7:25:B2:CE:5F:C4:B8:FC:FC:8B:D0:87:1A:CF:74:82:78:AF:9D:A1:DE:88:67:6F:37:49:13:C4"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjjXrqJVB0Vg7pwkQpWl8VIWac4rtTXA-GVhyaLjWtq071kl2QUMX1soj0yt3w5JAnDadFM3pmS33MvTuJiJ2R2j6afJUaogsSjHAfXm98DwsMfPle-CEkbqqZVOBGBVLJcJJMlElWpZSNrPdgoT_x5dPSYLWtv2hLEwEZHtvd3iUxOit7eC6S_XygH3as/s320/google.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v46\"\r\nexpires: Mon, 18 May 2026 19:29:14 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"google.png\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\nserver: fife\r\ncontent-length: 12407\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 320, 8-bit/color RGBA, non-interlaced","md5":"a40eddef23d17dd0ceeedddcc586e2bb","sha1":"b6f7ab3c1f4e8237a90243d4c427c2cb65ef8033","sha256":"a316da52be071d231c22960a5a65efd71a89a91b4a3dc10637ff479b028aae8e","sha512":"4fb67de9f0b3f93e228cfa485b5b5518d8e063620fcc395b4c86c70149710965e0a97dd6703ea1d09c9e39d4dcc76232c2d8407cc6b3b7c81a9a00e7ffdd01e7","ssdeep":"384:A1m1p4i8FauPuC0AmF09i25c/iUlSBjLBS:Gdi0uAG/2+6++BS","tlshash":"2b42d0f76655ffcdb06c9d244cd711a42669923bbae9e58c3001bd33b28de474e68190","first_seen":"2026-04-22T19:05:46.405557Z","last_seen":"2026-05-17T19:29:56.067321Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":128,"dns":108,"connect":30,"send":0,"wait":798,"receive":4,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-kupon1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icon-kupon1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 536\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 09:12:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=C_.XHgSNWSOv85gBaLhK3K7_lAooG_ANAni6xsAOAk4-1779046151.3089561-1.0.1.1-HwOHVXY_pex.NfXKZn3wev6.MfrOHZWDqJKkFpj0LDJl3_2Q4BDQr9TzQ9vscJB7XVOPiPmDEV5Ddqfm2s7Wolmo3adIQ8ld9VbL0_fXUMLq9e5cATKeTsxdDxuWJU_d; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 234;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1461\r\nvary: accept, accept-encoding\r\nage: 2448\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"675ca5eea33e82d22440358d48559ffc","sha1":"badb30484397d883881ade5782e22940b2cd4005","sha256":"10d939985e8cc3eb3aa7cde6b348ea339f3a320237c06a2d022031fc4f374cff","sha512":"2aa186d1268dc6c98b92cd6464fc9095fe06f1aa1fbc6f13b7e73936c695b3deba49dc88c317df78aba255c6741c23c06b0b8d148b72845d1a76f8e0750746f7","ssdeep":"","tlshash":"16f0202e37aff841df69e4045abacab3128881da860a6f3a52819baa20a0b00441350d","first_seen":"2026-04-14T04:32:54.911594Z","last_seen":"2026-05-20T17:43:42.744534Z","times_seen":428,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Bw9A7WbP3C4khH5RL1gQ2UZpyxu1.uJWfuEOk5G2QNk-1779046151.293473-1.0.1.1-ptkPW7S4WxmKXZlhfRBWQUgUZLVSiJdBsg3gQUkEaHZxOvg2uinTEP99ZMMQmQw4gz36rDXEvBeCtaAeDw7Ro86mzaa1VQ4WsPll5JwgWOGxvMmL43UGatdXRc4LRuY5; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1584\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nage: 2167\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ec92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-05-20T17:43:42.929923Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=waKzkZDreOu7ryrMcEhV9xsQFL9Tr8ts.u9e0PWBXwQ-1779046151.303664-1.0.1.1-Pn9qcrT6Ce_wrWsBL2flL16g5R8WjzgxqKgn8Bbk_TL_RoE5Vv2kI53Iu5zdYjrimt_SZXOOmfp4EU5YkYLHMnV8KrGOaFhoGzYDWjzNh697cQ6nLWol0sTuyz65Yewe; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=5247\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 1704\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.926597Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/new2-webduo35.js?v=1778935083","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /js/old/new2-webduo35.js?v=1778935083 HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 06:13:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cyU586HkfXznIHRWFi5%2BUt5nszv0jo7SHuqv3jJhNgYCVti7fw1eN8kt9Nq1eLU2bSq60mBo2W%2BV8ac3E5Yo1nyjH1%2FpKY%2B%2BOqvj%2FyIab24AJEwIfTRQtNAOFOv6%2B%2BN4Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd507948fc856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"19c4e6575a2244de4704267b70c0d7ab","sha1":"55c3917ada6d548f15eb4395ac4858d2f61539d3","sha256":"94c8001636010089dac9312b1edb120556ad4e55e14a0497b78a3882ac49db72","sha512":"2a4afc432a780be169028d5274813a4d5a52d98c99eeff5aa6b1efde9bde19a5e178e9bbc6c8b8b13416f50c8cfa1b884a4ca1b0829a2681c7e81f82e8557545","ssdeep":"1536:LlNm46JcJAvMZrFhPO/CD7eJe3eNeyeiC8iaWiAQiI:u4sEAvMdFlO/CD7eJe3eNeRiTiPitiI","tlshash":"8e33424afb4c4a8f47f327a488378145af1dc835e20b4b05fabc48887b5a6557371a6f","first_seen":"2026-04-26T09:11:31.857142Z","last_seen":"2026-05-20T17:43:42.872518Z","times_seen":316,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.js.iife.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.js.iife.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"4f62-kzzghPk0R32ZK+R2NNlbYq9mNOE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\nage: 1422258\r\nx-served-by: cache-fra-eddf8230030-FRA, cache-osl6536-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20322,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16599)","md5":"6b77b834b81897997de86e6ccbc0d91d","sha1":"933ce084f934477d992be47634d95b62af6634e1","sha256":"3e3790dea8118c80a7a1d81af9454f8f6fe9a5dd180e843ce8ba638c5b446753","sha512":"f04755e03e559502d7d1d24571dc7a87fa09fcd6a70083256958b3e7b343921cf06d0b3169b82916e6b48333387f9bdd93ad027d103276195b7db0d384c7e1df","ssdeep":"384:s5RCCTFEoyA26uPEJVpLoXuAWhH3XyKByxtyXTtzQu9yXdb77FMKtCNqbfE9QB3z:sntR5726uPuVpLoXunhH3ChSXiXdDFMS","tlshash":"1192d75824143535933f385ed5b7874a7b302670f112859070be886a276fdcad2baabf","first_seen":"2025-07-17T08:23:56.415028Z","last_seen":"2026-05-20T17:43:42.883243Z","times_seen":326,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":6,"dns":4,"connect":1,"send":0,"wait":7,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=3jeYccKwoeGyovV_ellNOhkzU6RIxBoJdbSZVMgQhsg-1779046151.3112977-1.0.1.1-zo1NwcWgcYBOu508wPlWatf_lqFgoK09fmQGqs_dpmiBUVnY4vSkBUtq1_hzJffejUNRUkAOu9_mdyN8Rxp0iBBrbGO2dvzeErhzs7VGUfIRFddMHR5zKDiBS6E2Ecu1; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=4945\r\nvary: accept, accept-encoding\r\nage: 2853\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf362efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.84602Z","times_seen":2918,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=kPk2QzWaCsWstXiG2LnbkKrcP8uVRvBcw8wf0UgMqV8-1779046151.2974048-1.0.1.1-fGAAvQgl_Otxxd5Y5R4sWVrfX.rl0BhlEN6zdAmqLP6zqlelK6lB2WaKBSj1GCpQOHLaxnaiz42Ks3DLdSEg8uQXlXHjamCt0d58IZ6XiEcW7cm7Gn72geMWMOiDXF8C; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2835\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 3232\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ee52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-05-20T17:43:42.841473Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=jSq1HN4gEQyMN7vmD3cuMIrK2bxIntwZByVvN1oTmGI-1779046151.3247125-1.0.1.1-0W1ozMxyVALuUwNHjSUHtLiM.xjVu5N1IIadYSrLZiEz9BKiPb3oLx8OvULgnXw5.NXYgyfrWN6BYjmvG0Frce06Get_Ow1BOOUnTdhGp1hesIjSB2OGnabrrU_CA9YG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3417\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nage: 3231\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078dbfa82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cc0dcea77b7295c691fe07673177a86","sha1":"666431536479501ce70432f76475b7dc09ae70df","sha256":"5b8992379e55caf367e94b27323cc0e64b656977881a2ec14c95e652dc527920","sha512":"c48c66c5b41ac16efe1ff90bc4375866f13303aa320f64feeb13cedd480bb4bba5422a6965bc2c81700de0953d0ff17e010e660ab5c993bf681be6388cec6315","ssdeep":"","tlshash":"9de0f1dcc6a89a046504a0d07633370dd3d2d586138dba926345f430122462dbe28cb0","first_seen":"2025-11-19T10:28:57.292064Z","last_seen":"2026-05-20T17:43:43.050851Z","times_seen":1350,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.Cjs2koNL.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.Cjs2koNL.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEj1IbWExsfXSgK2wwYQ9F280ZGiROaIZpe7pJnQEDJAx17n-qLKyt2hkDPfBr9dwf7kLZPrD74\r\nx-goog-generation: 1778828603768381\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 79623\r\nx-goog-hash: crc32c=yOI8qA==, md5=s6o/XmP3RlnHLwM8CgjSAw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 15 May 2026 07:03:23 GMT\r\ncontent-length: 24797\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":79623,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b3aa3f5e63f74659c72f033c0a08d203","sha1":"5034c82b17829b3fae932829e66eacc514a21b61","sha256":"4c91abd15b043f7a4c446cdbbf5a3d37c9dd8b9e3de43dfc09f14daac1ecdeb9","sha512":"1fbc302c9591aa2b686e563adef31bc8d65656bf08a6368c6f089eb6ab2debfd228e4c1eafe7812d0d06ff3a2b1f015b61f8cb07d52f8c817455b1fd54a5e292","ssdeep":"1536:J+3CuFrKN1Mclp/ItXqD/KHEps3j33Kj7lUbJS+WgqLA:I3BI1fp/INh0GWPl4WgqLA","tlshash":"26731ad1f295f5398be7a8e551355103fa3a7918782c8170f32cce20315e686a177fab","first_seen":"2026-05-15T07:12:04.947565Z","last_seen":"2026-05-18T10:17:36.554322Z","times_seen":281,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/assets/24h.png","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 11955\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3PFzYDdW4hL4MSQGpWaksd2KdKM8Q2DmrR76QOcp4unTauiAjnPfUe%2FjlFKaI3CjbtOvrguC3v0qtSXhi3I6iVxvpcrEml8H84U%2BQRAdHxwGnaJLjHfDUx2qzendWq0rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507948fc556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.03203Z","times_seen":3355,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=3nIiWraSWg0qpLwDPQB6yfeTSl0eXU_6EB5esyS1S1U-1779046151.2998717-1.0.1.1-su7gBm8fTmNDoDsvz7g._WUlhU9bJEdpMkwT.9DXdf5o2FDMaWi6m8bvIaxRTfenoBkk1Xwrsq7psN5lyMVzAoB_Id.76e8NqtlrMnMP3wl5a.U68RSAg7qjInyPH1Ia\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 576929\r\nserver: cloudflare\r\nlast-modified: Wed, 06 May 2026 07:18:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nvary: accept-encoding\r\ncf-polished: webp_bigger\r\npriority: u=1,i=?0\r\ncf-bgj: imgq:100,h2pri\r\nage: 2392\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5079428bc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576929,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"df6d1b1a7bca8599eb643a3fddd057c8","sha1":"707f0f34295e2312275fcb755136491a7c71edba","sha256":"bdbd2dbf13e4e420b8f7efaeb9c824aa68871035208123b790552ddea3225bb1","sha512":"55139c66982b30c8ba4f8960278382a063fca8b88592f9eb276a246e073790da4349209e06f0506d20614bc2a5293c5767190e8331a7758126df9e4ee02c0bc2","ssdeep":"12288:U1ocmsrdJjPQ9qCqqOAgiuVTPzTTT3kjKCrgK+2EADMbwOiITIw2LYmT:xOp6ICqvBiut024/DM0OQjLf","tlshash":"cac42394393ca7bdf56121c857858c5374e68ce9e09ff27fc6102eea3bc716a6a31061","first_seen":"2026-05-06T10:20:00.160575Z","last_seen":"2026-05-20T17:43:42.738184Z","times_seen":194,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/style.css","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icomoon/style.css HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 488\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=LoKMEfKU0evllp.fFNExngJE_iLVSP60l5UXE.RSNWs-1779046151.2928-1.0.1.1-rLpbLxNQC2NeC3RUS1v6ZxJa9pC5Yke8_fYdFfmaPOlIyn9xbQ3rg8IF338C.tp6lZ8rxBE20zqm0wVrzZvTqi.nP8LMUxr5GpcC8.2PPRWGLHF3tAipf1c4O7INjX6g; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ec02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fd841219e646258717d8c8c5ee8e1645","sha1":"3b11bf2731abad4ee4b4ed81923025aeee1779a9","sha256":"bd964175c358da3b2151572737f09a8b9b7a180b482ec1b379be8f05a23cfe81","sha512":"7854a76358116fb5eec3fde344bdafa933b20abf93bc324a0484a07188d16624c28e4146e573eb9c6d34041c4b04718385c5d67bae6f5f7ee54ab4a1c460ffe4","ssdeep":"","tlshash":"dc216dd0ecbd2851930194c833a73a20bf0c52159c4a6c9af7ab284cfff670592d679d","first_seen":"2025-11-19T12:27:30.570223Z","last_seen":"2026-05-20T17:43:42.742342Z","times_seen":1348,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":21,"dns":5,"connect":4,"send":0,"wait":58,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=kmJKS4UO2R95N3bGHX9VmsLgaqpPzYqRihz0g.XzXKg-1779046151.3031402-1.0.1.1-18qMRGvMifHIWmqObO_3DA0tGryiOZAFCZERMyRQzcT0BzI7ZVRSl.9dJMrVHnaJkrMNPfZ.yNtIODKerdjMwxdv4yCGOYZ1AB9uC85xF838qkPAECsu1ZlEBRyv8RYv; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4303\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.842684Z","times_seen":2915,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165140.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165140.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 193744\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:51:40 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DP9CVTAMglaT3ezvS2jJmr7dou3Sh28q9rGLKoxfcwsODaAqSd9E8BIhB4Yc6zi%2BLoq28CvP2HGBT8xKA7544ij1GWkETIlP6ctfNb6D4GW3YJaY0XlYwRCIRSm8BXpqSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193744,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"bafe823276feadbeb38c6c5fb58f2f44","sha1":"bb7e214f5e598c1001bffc1304570dee563ad74b","sha256":"39f02f79e108534eeb8a23afd191fefbbeaebf13276e356fd33deb3a93113c7a","sha512":"8d9b724769a314b47983b1c75e9021c6b39f3b342fdd0d851c6f0e0412ad96ec89b26a72dd8d559e822cdb2ef83f13a1d0b36180fea60cc11faa647e8e625826","ssdeep":"3072:8tuPY9T5lzJI1OqGr78++ADBUNb94FK+6Rislz8Shu9fcv//KFE0oGvxi4V0eEYy:8DioBX8++ADBUNb7mS0M//Ky0N4Oe7","tlshash":"da14126d7a280e8059c834430f0ebb8cf727518cd47566f95b421b64bafe77ae06622d","first_seen":"2025-11-01T08:31:13.831124Z","last_seen":"2026-05-17T19:29:56.08951Z","times_seen":10,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":512,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\nage: 2544570\r\nx-served-by: cache-fra-etou8220161-FRA, cache-osl6538-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-05-20T17:43:43.009278Z","times_seen":4981,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/m/capimg.php?8955","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /m/capimg.php?8955 HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IETTHaBDkg0JG0NtVxEKKQmRljg2Fyou3D%2BGh1Pb5em59yRFWkRs3tdaqzLOX4VSj2h3cw7wGSHPSH4YHnZPCxRXhOH9VYpVS4Q4XSQU9AcImOqLFyVxaQUR7QHzqsC3OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5078d788256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"b927b0d7472b6ba3c7689552d751f56a","sha1":"62d01d6e051b5f9ac6230bf8c250d048e58d0294","sha256":"80bf13555efb843fb0c1b895530d7b5024d2a97975f6eb33b27af1df972b3675","sha512":"d22de498595efe15062484ee8c00cc492d55c82b8ed55e00faa01d2ccfecf09de6e3a430aa9af804edc1626fc3cb4d1c50dbb294bdc05642e9e75607a8af0372","ssdeep":"","tlshash":"75513b12e192440ffb5b45012a0608a55df9dee82e41a372e3fbc32e46256e9347c987","first_seen":"2026-05-17T19:29:45.55013Z","last_seen":"2026-05-17T19:29:45.55013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/casino.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/casino.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 990\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=P.XbJCgu2irc3MqUxqraU5XYazi3C8E0D9xfZnv_d1U-1779046151.316531-1.0.1.1-VQGFuEh52q7q0u4AJ4gf7JELUcP57hT2da6cxlNNt6dga756W.psahovGPBCEO0iuG1zVUSEeY4NPBmgxGA.EjX3VH5q71GZdoB9L9s.tDFpdkwQx8uC9.MaY8YUbLQJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4290\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf742efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d3f2a042f3a157da682adbb52f3040","sha1":"40066f35a2a29d4bafdcd05179e9f2c7af1666ea","sha256":"3c22945d0cbdf7368c5eaa30f26611147425df5c45d7303551b9ba9ddfc957eb","sha512":"0e7768bd55d719c646cdd57e7b0bb038c668142fcaf10d3d61d33b3d992ffea15a8f48f18404118d64cc3cf791f37ab6b8d0c4f044ca91a550ce0ef87fa807db","ssdeep":"","tlshash":"1011c8a98739c523e226cb39cf0c355a84a86385f031b0bf95c2790c70ea32b3b4c980","first_seen":"2025-11-19T10:28:57.226883Z","last_seen":"2026-05-20T17:43:42.993098Z","times_seen":1351,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/arcade.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/arcade.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=sNA3An6Zlxb4_gyRUgTDXjTak6fRiZ60ypDdsxlql_8-1779046151.3170478-1.0.1.1-2zpPLQGRR3zGg_ISLpXxLbpVGRLzr49TjMGIBP_uPQu1ukfTjfjNbQmD7bMT5IgKWD32kdZffjrlADlVjRVO5svltd77iOQIYOZWRxJmJiooLzdG0S8OuKJCmEWZFSg3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3280\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 3515\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf7c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b684e53d508cd6b31c7783bdff6cca5","sha1":"9ad973f643cc511319f32dd501539f6c223d45c2","sha256":"e5b50f69e6eea2b60cd5aaa8c79b05ed8a3846ff044ce8b9665cbfe56a821935","sha512":"9fd98539b171b98f674bfa6637ce289c851907b24447b6e964c1e9a8bc148eb2b6714446b2b2b420f75dc6f2bf18d00c675f2ee1be6747ff923d1500c24792b4","ssdeep":"","tlshash":"23e0c010ff04e6759ae728146839c95e1c008e5938c7cbd4070d06e1a1b43530b0295c","first_seen":"2025-11-19T10:28:57.335494Z","last_seen":"2026-05-20T17:43:43.040703Z","times_seen":1350,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css2?family=Google+Sans+Flex:wght@400;600;700;800\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 19:29:13 GMT\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30124,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2c8b3fffb968cd93ccc776a09097b825","sha1":"f6d6ab8f21a8b94e7c5407e4fb017c7d704c6a2b","sha256":"af5e4fed21788763d0338b55e80c3189e19ebbfc72813d1c8b5cd25b79e1fda7","sha512":"ad73fa045a4f7f888d220aff9c25cfa5549e1fb2966e9cbbcfdba7d7f58a3eff07699f0d2f5d9199e6eacd8d1143338500dcfdf6b2b2c42238741f38f51d4218","ssdeep":"384:x+NzEaFqY9v2Jyup5x8zNEsDqY9J2TyunX/9SEEXYqY9826yu84q6JPEOBqY9L28:id9NxDwPmhFxx","tlshash":"3dd252e191179064a75758d233dd3e26ec0d42427600e13d6bfe0b0fadcaea661f53ad","first_seen":"2026-04-26T09:11:31.970809Z","last_seen":"2026-05-20T17:43:42.95446Z","times_seen":292,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/998db478bf7c06d5817bf846987a0d0a.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/998db478bf7c06d5817bf846987a0d0a.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 13 Apr 2026 06:11:42 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 1349901 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 7057\r\nX-ReqId: MTc3NjA2MDcwMV85MGE4YWYyYl9DNURDRDE5MzUxOTU0QTdCOTUzNDM1OUU3RDI3OUU1NA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 7057\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 2985451\r\nEO-LOG-UUID: 12587422605561432134\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7057,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"735bf7ff4f01303c5986fc0005b476fd","sha1":"0f91c276004ed1b5a9d5ad474826796f9b3a81d5","sha256":"dd26b3a7ce2c2d69d64251a6657ce0dfb90d7792e9e6daf3b48ef1db7b26d96e","sha512":"44169033b5fc11111bdef4c1af2738fb960479eaf660e63e845dfbf9eeca6d4610b5434d002bb17ece5bc0cbb237796aaec6d7a275f894beeb71add28d253dab","ssdeep":"192:+a1yp/87EM7oHmHFtRAJsWqzP5qZ75ieRg:mp87EMgYtRXP5qZ751g","tlshash":"66e1a0bca5c85354f1e8c63e077596df232947e852a378e9005636d1f83f825c32d116","first_seen":"2026-04-15T17:53:46.609335Z","last_seen":"2026-05-17T20:22:31.637994Z","times_seen":20,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 20:59:53 GMT\r\nexpires: Sun, 16 May 2027 20:59:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 80960\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-05-20T19:51:25.891622Z","times_seen":17044,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":262,"dns":1,"connect":7,"send":0,"wait":12,"receive":7,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/favicon.png","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 72231\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jan 2023 02:44:16 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O341TI4LGCRjliqEE2jzWVJdCvBpusSYgKwAygFi%2Bj%2BLaJWJqbRQ8rrKDGoHBVzA1cCC%2BH38cUaDg8pNwtLgTmAVUnedow1CKL%2FHNYmZppAfabcA6VyAJkTuCjV3BwFhSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5079d4a5a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-05-17T19:29:56.035375Z","times_seen":131,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Popup-20250206161344.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Popup-20250206161344.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 141198\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:13:44 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UsKWBTSCXwnJn5NbQzBNZ1VwuBvC3sdg%2FfKQKn9UYaG3PzvRhlN%2Bh75K%2BnlWFhAPY0z0sxAVjynJrGznX9c4IWNcf7I%2BxrcKn%2F55Dm6claND7w%2F%2Bok339xSD0ruenZVOHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507948fc756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141198,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x300, components 3","md5":"9daacb364ac6532810d871ce0b8197ea","sha1":"359b54986ceeff840d29f439d557de0f670a8f56","sha256":"9e30bd52d9b24d7b7a316a2ac0537bc942891c184dd94864e18c9b8f9589d232","sha512":"2da9c4520177341994dec559f9611d01714058824100fecccafc4d17c765679d426f5f8373b6d0f5276fed4e06afeae1f3b8a3211b5b9ea35de6eda7b5824073","ssdeep":"3072:XjEVVji1CV98VaPOO63OebsSZ+Y+iONRzNO9ASas2J:mjiYKaPO/eebRsBNl35sU","tlshash":"a4d3220375620c21c6821bc1756cb289c62b4959dbd2fcc4caebdca77ac5fa4bb4650e","first_seen":"2025-11-01T08:31:13.820351Z","last_seen":"2026-05-17T19:29:56.05829Z","times_seen":10,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEiPQ7W6FrC3F_DdRugniR_bQEc58zmbSUBChWvnrPAT6hz1aY811GdW3YniINHa5Hhw\r\nlast-modified: Fri, 15 May 2026 07:03:23 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1778828603778554\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-05-20T20:44:30.469017Z","times_seen":14965,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165228.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165228.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 221671\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:52:28 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5vvENc2gSUcYP2F6TSyhpo2pb%2B0EjYBpx9bDJIx6p%2F3Gqn03FTBZsD8RLcHf9qrNneM9Xm9K8IHkcVGBVeXvGEGHAykz0mKDCxm8ajr1wrhjcRvIr7Q8lOECaDBaShovg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f5056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221671,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"cc0fcf5a4cc3f5db0100d27f0fa6465a","sha1":"037b818179b047674956390c1bcc27cde3311549","sha256":"96e13458a8976268d321146321847fd2103f97926dac1b2fbb28e6ee199084b9","sha512":"b6812c94cfcf230dca60f9fecefdbfd57934fe168ee8e46003ed90831eba75744dae75eb2919efc366cdfe76a61e6096726894662ac76a4dde9fc346cd8716b9","ssdeep":"3072:tWdAv0OdPM7c6PST8blvrQYMrv/ekcEuof4b+zL6AGX1AIzGoeBgXz3MA0e:tQ40OdPM46e8dy3eBEui4i/6DJzAgXl","tlshash":"9f24232385754bf3e172431c84e2dbc115e8b4e01baa5b887b95a4bdcc7787d0adb12b","first_seen":"2025-11-01T08:31:13.832974Z","last_seen":"2026-05-17T19:29:56.075469Z","times_seen":10,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":674,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/dba65c184e03c860ed919ce192b86c5e.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/dba65c184e03c860ed919ce192b86c5e.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 26 Jan 2026 15:46:37 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 56186 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 5111\r\nX-ReqId: MTc2OTQ0MjM5N19hMTg5OTgyYl80NkY3NTdCNDcwQkI0RDVCOEU3RTQyNkYwMTg4REYyRA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 5111\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 9579945\r\nEO-LOG-UUID: 4113988960724557956\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5111,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"af18a655d9415fc56504e3b46823f560","sha1":"05de6bdf18c5fff7007f5a816c8b0bc8fefdbfa6","sha256":"b403f6513eeec834d8caa7c025149bed1c4d9a0763aecde657a0d480ba116343","sha512":"a042c5a677db7c87c8f32493b05400f12ba3fa47cca6935be97f31219a12194de9b728096b2823f3c29ec43cebd7ee945e72a7805deb7b47a26efa8777990444","ssdeep":"96:+ajFaRNQ01VvG+BRCQf8AhHkXT8bTn9m11yRoQTN2YlqoT9dyYQQ8w:+aJaPZ1Vv/HfPhH2T8bTn81CoQMYl31J","tlshash":"4ab17c76f3b4ad02e92e6bf75cad9f0202e63725973fa57a1a57b18844302005444b35","first_seen":"2026-02-16T20:55:23.215625Z","last_seen":"2026-05-19T04:00:15.648342Z","times_seen":40,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":679,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.DqOOgqcp.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.DqOOgqcp.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh3dWxCevHVgPDY2lLQP0MEeOSoxCtzUK1VjT8QGvE3hYoC5h4W-Qr-FeNwG__iPi81vO10S29UVoLLFA\r\nx-goog-generation: 1778828604091540\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 304436\r\nx-goog-hash: crc32c=Sss09w==, md5=8MDkhKpAMXFa14JeFjHPTg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 86246\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304436,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65461), with no line terminators","md5":"f0c0e484aa4031715ad7825e1631cf4e","sha1":"16c9a791acc08c90a4fa206259a699a4a209d928","sha256":"e23e2dfee6d222c7ca1d4ab88af3b2276a63aa5df0fe3bb9d79d955815872b57","sha512":"1d6c831251cc4a42ca2c4ff7915f78d05ea70de68197feb43cfbf8b6fc9921ccb1b957e5f9f7af356ef274e881d1a8d569b34f004f0c39d29d5fa842b71e88d9","ssdeep":"6144:f3X8OEQ4KFjvqBOtt+ODfiYn/EoSU7kIS9BRIEer1F9gzBAFi/OiMwj3kRgxx15V:PtGeDKOtt+ODfB/EoSKkIS9BR7er1F9m","tlshash":"d4544ce4b352ba3cd7e7c2d690ba1609f33c3d59b42a5764f1ad9c0e3395448833ab64","first_seen":"2026-05-15T07:12:04.834552Z","last_seen":"2026-05-18T10:17:36.617372Z","times_seen":296,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=LFgCnMv2ec6dBa5flRqC..bTEoYkUKYbaZBcnBPXafc-1779046151.309373-1.0.1.1-K3aWd7wOx5fswpacoKvxdizMwQjvQhs3KxRYe1GKn70oPBXyXLabpwNg3iiwELUFqEyC.5PlenND9S2l.AOyEe5LZtaKzCRk09wpgC.ZZZWO3PNFXTYebffkLyRwKeHa; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2903\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 1840\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf272efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-05-20T17:43:42.765082Z","times_seen":2854,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=qMt5ATDy8.h2.drMOcfcnV8d1L6H6NlBZQh6OCIaKJg-1779046151.308109-1.0.1.1-lZKPgYQj3x821OQhGGNGjGUDMCLS4Kpr4EQL6laSzVzkd7dEiGy1VN89t6QS5rHV_qn7KG6O7d.2hc2q2rB0FPp53ynK3i8dIEhUsCIF_PKvWRa4ZuIXisb498VSPB2v; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=1698\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 4285\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf1f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-05-20T17:43:42.901918Z","times_seen":1864,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Trf9h98uBFP6afoeFjLCut8LFpZjM8AhIEOkrxislvg-1779046151.301608-1.0.1.1-Afsbh1dYmRCCAcADcBeIOnlxWWTYf3RJYsDYMf11Vn.t7ZF8nY0Pq9FNwt72bLQ5XsHDhtt4fp2PEt25zwwGR_X8MSzAdNXNIQA9ugINSSyRvzRGfcecXAmlErPRiRAo; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=6674\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 3607\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9efc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-05-20T17:43:43.017116Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=adGSF8tFUPCpBbI28i6499HmN8LyM8rCLfpz.1.RC50-1779046151.314317-1.0.1.1-M8DYBBR_0mLxS10GmoBNGuU51xXlZrclwt_PlsDfif72tab7QuW70Tg0U6QEL4tJVVh02Iza3.gdKFu0bSiQJhZeLU9ITeUVQCupc3OCt7BKyVavtiprJJCRMmZMam2t; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=2758\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 2181\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-05-20T17:43:42.893032Z","times_seen":2003,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=WHCm7FL893DiGk19DNDiMMNcpsWDz5GcKVXH_95THaQ-1779046151.3154602-1.0.1.1-QZ_jN33rXrHpcpZxzU8yMQgn0.m6_O7V0cy5d.0JeMLwXLQbYbTfHbhUj1dI_pyge7hWqRGSQOgUDC2uzSRwYWGTBrAWDIyZp4nzbSwHChte2UjwA8QxHbdYjwaNExZ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=3881\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 3744\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-05-20T17:43:42.973051Z","times_seen":1912,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/capimg.php","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qm0PwofkT%2FbSPxNnkdGbdxC%2B1tz%2BgP2UWNbKnY8e%2B5LYAP%2Bax0MokZv3p2oLmJCeLsQ6czPwqqUD2E0kmpkSgVxOjTPcOkHUXfva6Chg36p26OUnW2gY9ddD9a3ATO0aUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5078d788556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"8d49d52cfac63d27710bc8816387c0da","sha1":"5ec4a3794994fa8fed531fbc0fee4100f6bc84ea","sha256":"65592435b44b0d296549b2cd850b58e55f0aaf385fb2cda9e96e3f6b698772be","sha512":"a69401fd107a472796c9741182a9434dd3bf49c554f303176983b23c67c9807ac987d60f04b58c5e8be61743c154f556e4ca2e8c74cec5b035a95c706bc9f345","ssdeep":"","tlshash":"ef01d66db3025efe8ec6e93b27da1e79006329fb1788410820b7e00b70008a58b317ed","first_seen":"2026-05-17T19:29:45.559868Z","last_seen":"2026-05-17T19:29:45.559868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=Yozh12iJC94fybRmuG6f3L4Jz1fKwwxM9f23CdtTIHs-1779046151.2942832-1.0.1.1-oGk7Pp8XJx2gi0dokmbT80xJ.ZoOyph38ASGlHQTG19DY6zHbiggDnN7G1rKERMDvYt8gZ8A428cd9tlwhKs7fQi5HfBMRsLWAlW_ffZMnDCBFBP8S1Nal8ikWCvpxaz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159010\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 05:26:48 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=1,i=?0\r\ncf-polished: webp_bigger\r\nvary: accept-encoding\r\ncf-bgj: h2pri,imgq:100\r\nage: 6572\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5079438d356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159010,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x200, components 3","md5":"f032c5ff15bb72cca281e6bce067cd88","sha1":"31e46cbe9a97e7d762a03383926dead27978fb3f","sha256":"73423da2297afa700294ba45a8519230aabe73ab101c20ac756473d899619ef9","sha512":"798745173680be363b6330381668635bbd5307e3b00411ccc232b610d0def9d58d57b78ebaa230bd24f0d46a9c5261005d11d08cc5e99f92745e39e90493ac96","ssdeep":"3072:vBcGK1L2Bvf9ril6XmSzitY7q3OolcwAunpNpLhi8sPSp3BMX8nY8mzCLQqpK5:v27B2J5+o7q3OEcwrnpNlHKUR0TmUyK5","tlshash":"13f32208fdb3d90b6433d11ad064970da95f4b74813297f018a4bebed97c78aa49d2cb","first_seen":"2026-04-27T12:37:02.232942Z","last_seen":"2026-05-20T17:43:42.874829Z","times_seen":313,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/guidelines.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /assets/guidelines.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=waKzkZDreOu7ryrMcEhV9xsQFL9Tr8ts.u9e0PWBXwQ-1779046151.303664-1.0.1.1-Pn9qcrT6Ce_wrWsBL2flL16g5R8WjzgxqKgn8Bbk_TL_RoE5Vv2kI53Iu5zdYjrimt_SZXOOmfp4EU5YkYLHMnV8KrGOaFhoGzYDWjzNh697cQ6nLWol0sTuyz65Yewe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5688\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:04:58 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\npriority: u=4,i=?0\r\ncf-polished: ok, orig_size=11637\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 3823\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd50794691a56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c7481d5a81d1ffa560cd5fd38d40c6","sha1":"b0f1278c93a08d9a83a0817f96ed4df81db4321b","sha256":"ecb550035fc18ec3d65ab4009346a27e06a68d0579b4e06ff17fd18f95a2c1b1","sha512":"eb8bee706d476461c96adc6517245a39a1bc5f1e25eb0d9f48496852b4a550f70bd7a0be4521ec7c6927863549136e58d3cd48f9d35ec7af411153c0bc12b2b3","ssdeep":"96:PWSw6RKoMSmUxkDYGlhbnSTKFVBc2r4tplUI/v6AizeXQQ3FUjKd:Pnw6RKZSpax3jjLc/tp9/+ggjW","tlshash":"68c19f7345fe36881c34b551c9fd24fd4e40242c42d2af3268c34a56999cf07e353ac8","first_seen":"2025-11-19T10:28:57.315993Z","last_seen":"2026-05-20T17:43:42.784973Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/driver.js@1.3.1/dist/driver.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/driver.js@1.3.1/dist/driver.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.1\r\nx-jsd-version-type: version\r\netag: W/\"f62-+7eGtYbhltE50OlNCKHiCEyYGPY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 498134\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\nx-served-by: cache-fra-etou8220194-FRA, cache-osl6536-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3938,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3937)","md5":"9a7949052a7f506e86cc0fe3b6bf1733","sha1":"fbb786b586e196d139d0e94d08a1e2084c9818f6","sha256":"4b398481a7ce8375af4d9f58f39410c73a0b70726fe513686d3d51c10ad76cb5","sha512":"8d1b0ceb65cc465df77b06744a2ef25fa00dabe6625b051cbcf9381f60caaf8d7b5bcd2b3cc5f36c3feda3086cd98128bb1fdd7ceb954642c1fb94dfce67e896","ssdeep":"","tlshash":"a281216aa1441a10e13be7026c83eac533179f91f2f35b87b5175883c5c70dddeaba89","first_seen":"2025-05-02T13:02:49.560729Z","last_seen":"2026-05-20T17:43:42.85215Z","times_seen":475,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":6,"dns":4,"connect":1,"send":0,"wait":4,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DoTVWiIk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.DoTVWiIk.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh3QQrFcYj5bUO1zovBxsaeVaQkdMov9mAVrCPGHoznOh4hlxxKHn1jbC9qlS6zVpALKEKGEzRYR4IdAw\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604170346\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5298\r\nx-goog-hash: crc32c=5HPR3Q==, md5=UWMdIzLh3yLYJXHH6UbgwA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2153\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":5298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5297)","md5":"51631d2332e1df22d82571c7e946e0c0","sha1":"17dc0cfb8cc2f12c0af7317249f76d7bd42a1d98","sha256":"0c00564efc472ac5256d4ecd6da6b6160b3e5caf3df20225417e0f3a55fbbfe6","sha512":"eadad76d853cc88d81c9172cb859270862192812b48731d6871fa3d2722e266936cfd9c40578f0cf2ec6bd4903b599597f7407e7d04e03e94b79d017e7b9eda5","ssdeep":"96:HHW1MDMDY5x1pnq9kuOxmPkkXFcQCux3MpfR9xllUSvnVDtPVWFt6ida+Kq92rSb:nW1MDMDY5x1pn/mPkkVcQCFNl+SdDtGr","tlshash":"52b164cd37c170b756b7a0e5087f9006722db5403cadd410c224f8e57e6aceaa1dbe2a","first_seen":"2026-04-09T11:23:51.371548Z","last_seen":"2026-05-20T20:44:30.473681Z","times_seen":3886,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=r3X6gBL4YZJsWA46G.cZhn3CJ8yQXdJT3bBhQZUYrk8-1779046151.301868-1.0.1.1-OaL9eyxcYIxvuDzHn9ndZwl92HF3yiqiYVD52kq5p6VzjPmhgdEYx2Vg_O87H9B1SZv2kctBikJUsy8eRKdI7Kg2ChDRRw2WBRWX2Vx4IOTj7rtuukkGMen5dFD01WdF; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2690\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9efd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-05-20T17:43:42.835256Z","times_seen":1873,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=9E6rtE08wEV8Hv1xkOJx09nwDA1VtRKuFtckOiuBJvw-1779046151.3127954-1.0.1.1-nvyBtv07Xuhu5_kAPDm9kEm4WWPHPVAIswcrpwj0Qp6hSp2nNcn7GqGA8TqaRMxUrCyzgCHF9DbWBibT5_p4CnkUFUIDHGeBe9WQGQl5YYiYV3Kg4bvVCN2JnKM97GaY; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=7983\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.77458Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/018e260ad68bdad741c61e3171c4c608.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/018e260ad68bdad741c61e3171c4c608.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 12 Mar 2026 09:51:20 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 469072 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4706\r\nX-ReqId: MTc3MzMwOTA3OV85MGE4YWYyYl9EOUM0NjdGQjM5NDg0MzE0QjNGQjIwQkYxNjlENEY1RQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4706\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 5737073\r\nEO-LOG-UUID: 15196217165142831109\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4706,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e2102e28ea302189305a495e2f1b2934","sha1":"74910d5b2a919028d382ee69068aa9da4566a961","sha256":"f83368caf086f31a2ba4d0087bebedbfddf6ea5513315e6510224954f7d057ca","sha512":"c24d6dbbf91c7b488b4a6f36650c2f4b3ae524b0384438ae80939c536848971cb261093b1dcc83d801476197706bade12b90d20a1af01fd232b109ff59e31845","ssdeep":"96:+ajyIB8tE3QTSXB/G8EB3F/dBhWHIICZ2Jovygl5LLC:+aufXTShH0F/djQxCs2agvLu","tlshash":"20a15b6f336f1565c888cb34ccab27163548cd38337aa997965ce86ca63c1f29835e44","first_seen":"2026-01-04T14:37:28.422176Z","last_seen":"2026-05-19T13:30:59.743283Z","times_seen":42,"resource_available":false,"data":null}},"time_used":2142,"timings":{"blocked":997,"dns":439,"connect":21,"send":0,"wait":26,"receive":0,"ssl":653},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/transaksi.png","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/transaksi.png HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 218956\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 06:57:58 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ia7h4g53619yIaYGUxLybRnjPxkS8qcZVcOg62VgWFsVPi944YbWTrcgECJ%2B2osgonQCP1Gk%2BGQlJze%2F36judap7qfyGO10fi7TNGeWV8Ad1W9GTI%2BlqI2BSFOLnmuoSbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507946fa056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 400, 8-bit/color RGBA, non-interlaced","md5":"03ce22f06b6845b126003566c4b55a80","sha1":"b8c6630bf76a1e00e1d3d0f9a09b7111ae2c7b61","sha256":"30e1c5205987eb61c60d00f5826662814303555dbae1373a7dba34bd79c384d5","sha512":"a5d75c88c4cb340eb1c2dbab05873cddf2fe24d3b5e79c2c735fa0a868ea1e095374dec7604af778612c02acc5dbdc0b4872e6051f1d71feb8309cfbe6d78242","ssdeep":"6144:3V5YETujPZrC53dZePFe2+y7BYYvSOTEh:3VO5xu53dZyFeWJvSKM","tlshash":"54242342cd028f89f850bd35e1d8c796ec7ad7d935c9e1ae9221c4401fda89638eb58e","first_seen":"2025-11-19T10:28:57.311271Z","last_seen":"2026-05-20T17:43:42.800977Z","times_seen":1141,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mgw.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-mgw.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2760\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Apr 2026 05:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Qf9vHyDmHneaOjoA5HCLXcsG_06fytu1QiDzM7nDGco-1779046151.3103673-1.0.1.1-2ISnuvx.Qx0_pkVHM3zEcbPlMeltwAqOoMfMABiXBQtYJgbQFd3ZIMgTHd5Qx0giPVPCOi2F_vKLhL2Rcgxs.3NFpMwIHm_lOjRqUyWBXVdHIAej6iZnJwg0MoKV4_s4; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=6390\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c51dc9274ae15801f9fa1e32b892cf","sha1":"7c89550560e339509024dd387d282d66d38d3e67","sha256":"8c1188260ef9e4c09bb098f524821fa3d71b61203c9ade6fbc2dfcfd48cf6385","sha512":"9ad4b877d17cccd0436970332fdf02398f7bd72b8430926235bfcdfb8c24e6c04ba0566d40920051b6ac447d3091ed31aa9db10a2d48b09fb1840b0a937e3a95","ssdeep":"","tlshash":"65516ea2b838f8c2d881aa1752c03701e50fdd3f49050cb36271a11f7b1d3658d5a927","first_seen":"2026-04-27T12:37:02.079089Z","last_seen":"2026-05-20T17:43:42.759428Z","times_seen":316,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sdl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-sdl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 586\r\nserver: cloudflare\r\nlast-modified: Mon, 04 May 2026 06:39:32 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=4kEXBbNZfrX57sXzr4eJoKloXZzOsz.9.IABc5NKwcI-1779046151.310558-1.0.1.1-jo7zLmVcZpcYOKkKno5pgy3rqIP6h_X1fKbGSrrjPhKZCUDdOXGu8U8ia3d0a8u4cl0umreBKifrpVQH.x1nP9GAOymeQ5XPpzRgilaT_v4dwDMhR5OQPRDsD2g.Blh6; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1253\r\nvary: accept, accept-encoding\r\nage: 1905\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":586,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2754a8148a4e553fdbb63492bec645f0","sha1":"9db57ed1d6256916a61d856b8c7c21484d439b27","sha256":"eb50be251aef3eb35e8b675fd69b89a52c97b9cdfa364f67425546a5b4e5d558","sha512":"0c98537f16071734816139b881716b1e50b56ee1a6a8b7d4317a80fe04e49e99227ec1f854cd835f6a8e3e6883b6453470f257ffc0fde8152c01e1d962913f43","ssdeep":"","tlshash":"d3f04181e1a04201097ab2bdb5a9af51208314a1c897bd30bf20d96213ea41c96791d8","first_seen":"2026-05-04T07:28:25.333902Z","last_seen":"2026-05-20T17:43:42.783216Z","times_seen":224,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=ZT04RXixHEFHI9YVxy.dXFjdFcV.jRASwzEPKbHqzv4-1779046151.303421-1.0.1.1-D8B_kyOWee9Z72dBZyJfq_o801ytgcMxMOvzfe5E.4ji_OU9WuY98HwDpluwHcA37npeAw5rflO4C9K_GCqAEnE1pPc8r4BbSD0TALJRrdyTDkOlb4MTgwoMlTY8BicX; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2322\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 765\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f072efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.919106Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=nSmsjgcFF1WjLZUhKOTSFRbCsUnN9tL5OrwWE3y29nY-1779046151.3042183-1.0.1.1-XRBDLxgVUAvh_Nvd8.zsSNpQop9UEWRKpljpc7aOOmWLQSFGIQ6Tz59NRlExnRt.nw7cMcyuYb0G.ba93lWIHDCTWkw2WVaKXmIVrfZfJ3JX0qrLHGyVF0wzkERoABKG; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2527\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2315\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f0d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-05-20T17:43:43.029493Z","times_seen":2834,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=v.wDhLlffvAtPiZUvas89Bxc9x3lAzLdPvgLngoN3eo-1779046151.313446-1.0.1.1-odwH8pRqBoflX5_Ceqx9mzmhMkhK3Nt3w8xZok4lvWf87AEYpv3grX4Qi99Cn.808dHIKXgWw6G7wgUk2CAzhxB4GbQNZHAYwOsLQOe1ZvwQrX0Uyz98LIiphWIsu2Rn; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4064\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 1815\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf4c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.73708Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v20/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/googlesansflex/v20/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 14:11:26 GMT\r\nexpires: Wed, 12 May 2027 14:11:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 451067\r\nlast-modified: Mon, 13 Apr 2026 17:05:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50680, version 1.0","md5":"c664764bca5d1e2cb8f91a1bda95b109","sha1":"f72f2849bbc634764a07b2c2b02d9b5daaf17ebd","sha256":"df969db47d6703b896885052ee2ec3c75f419861dc166100fd88092e890bc4b4","sha512":"3fdada474391694b75a1e694873f50b839155b6d696b053f47687f272378c13c6d26f49b5543d728918f197c44240ed35fc7bbc5df0d925275200f2d6266debd","ssdeep":"1536:k5+zaJ13DJepntMT46XWa6JIVVDX1wYOzK4:kY45depn6tz6JIzRl4","tlshash":"f83302991749439199d70f39602d02eea9bc317d21875a83f35deefe309a605e183f2b","first_seen":"2026-04-08T09:11:30.496686Z","last_seen":"2026-05-20T17:43:42.873783Z","times_seen":308,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 19:29:12 GMT\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-05-20T17:43:42.89487Z","times_seen":1895,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":33,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=yHwYht_BY8M6kxLlBPRQm3fJ9oJx02zjZbOEefdAgZk-1779046151.299676-1.0.1.1-ZUKnyRcT6qO_Cv8hlxZ6vRxsahj09Yj73THmTA8jy6uk9MjurDn16RDPxpdMHEuPRRTZmEfDFFOS6oFX2s3JrHtosIvvYQfK4Krvv4tV73uywINbYZyF1E..3bLK4vbD; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2758\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 4428\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ef02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-05-20T17:43:42.893032Z","times_seen":2003,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/3b720f181ce9993f9422d276acf7b292.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/3b720f181ce9993f9422d276acf7b292.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:48:31 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 95709 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4591\r\nX-ReqId: MTc2NjYzNDUxMV84YWE5YWYyYl81QUFENzFBRkZGOEM0RDNDOTAyOEYzNkZDMzkwNzEyRA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4591\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12411642\r\nEO-LOG-UUID: 6887278478794495583\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4591,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6aed4a0ad24fdd58afdf92187388afd2","sha1":"effb87007a069227e430a9e030262c7577f70695","sha256":"4c981b76616bb902583e020c5a37ae376cd4bfb8bfabacf48798892bac1ff577","sha512":"e593777488272a56bc0ceebe648ce534db7091cec1483cb8e5f86dbe6d4e013dda237baf025fd5b2ac58ac5a22ab6995ca02507583fb02287334bf5c840f05d8","ssdeep":"96:+ajbxMYDLZ7dkO8qOtokem70IRIVih/+uQNj9iN:+aHxF4dF3emwLVihXN","tlshash":"3f918d35fa71701bd8d517726cc5470176c184baa29a79feae043dc8cf16fa2ca38c21","first_seen":"2026-01-04T14:37:28.439413Z","last_seen":"2026-05-17T20:22:31.745408Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2135,"timings":{"blocked":995,"dns":437,"connect":21,"send":0,"wait":23,"receive":0,"ssl":652},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:46:25 GMT\r\nexpires: Wed, 12 May 2027 13:46:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 452568\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-05-20T19:51:25.853177Z","times_seen":9217,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesansflex/v20/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/googlesansflex/v20/t5s6IQcYNIWbFgDgAAzZ34auoVyXkJCOvp3SFWJbN5hF8Ju1x6sKCyp0l9sI40swNJwInycYAJzz0m7kJ4qFQOJBOjLvDSndo0SKMpKSTzwliVdHAy4xyRg2eWITmjul.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 14:11:26 GMT\r\nexpires: Wed, 12 May 2027 14:11:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 451067\r\nlast-modified: Mon, 13 Apr 2026 17:05:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50680, version 1.0","md5":"c664764bca5d1e2cb8f91a1bda95b109","sha1":"f72f2849bbc634764a07b2c2b02d9b5daaf17ebd","sha256":"df969db47d6703b896885052ee2ec3c75f419861dc166100fd88092e890bc4b4","sha512":"3fdada474391694b75a1e694873f50b839155b6d696b053f47687f272378c13c6d26f49b5543d728918f197c44240ed35fc7bbc5df0d925275200f2d6266debd","ssdeep":"1536:k5+zaJ13DJepntMT46XWa6JIVVDX1wYOzK4:kY45depn6tz6JIzRl4","tlshash":"f83302991749439199d70f39602d02eea9bc317d21875a83f35deefe309a605e183f2b","first_seen":"2026-04-08T09:11:30.496686Z","last_seen":"2026-05-20T17:43:42.873783Z","times_seen":308,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.BkPmegIK.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.BkPmegIK.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEjM9IF_36suUM0eXifniBDTgdYim4kE9pa8v6F1pVYWtT9_iJVdIuaLAalciXRgI2jTaLp6gco\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604160904\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 133258\r\nx-goog-hash: crc32c=PVER1Q==, md5=P7gQOxxHo8F3MNhF5OHn/A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 41717\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":133258,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50683)","md5":"3fb8103b1c47a3c17730d845e4e1e7fc","sha1":"4a04ad85e28141b7706ee724ec3eff494475e372","sha256":"b236405a130bf73e46ed9bb149600b23ff1652a570be15d3b217a64c801ae024","sha512":"dfd21d15f709896004a6e88fbdce600685f3fce824de8c16618ef9aeb2042bef64c722b48e79612ecd355505bb5e5f6f3426220d8429f1c87d22df2f1887f37f","ssdeep":"1536:VL9gUh9CvquGSVD7dfXkQAXB30qOFex8nHHvDZECnjMWWAGYUhWd:VLqUh9CSu38QZnvFvQWFpUhWd","tlshash":"14d3f8e83951f9616bf302a710af5807733c292b680d4960a211fdddb9b841eb17bf9d","first_seen":"2026-04-09T11:23:51.32121Z","last_seen":"2026-05-20T20:44:30.399718Z","times_seen":3887,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/693af0d277fe3179594695614dce8666.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/693af0d277fe3179594695614dce8666.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:54:29 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 121810 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4958\r\nX-ReqId: MTc2NjYzNDg2OV84ZWE5YWYyYl8xRUNCMTA1MDY3Mzk0RTA2QTQ5M0YwNEZBNEJFQkI1OA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4958\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12411284\r\nEO-LOG-UUID: 10723471464739656987\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4958,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"628cd566140a6ae4680821919d226c62","sha1":"d37e839a49f42bfcaca37ca0de87e10e2e9f9721","sha256":"0f0beb38dc69b59dc36ce0c63cc862049a1e539f983189df5ad1d74b627e0d19","sha512":"21e2a1503885c5f0f3275408bae1d1d8c6190ac6cabc5a04818c18a635b6aec6548144137f96441552daf0254711984975daf1cd793b95748b1ae06d5713564c","ssdeep":"96:+ajbnINPsHVS7/e1eAlHJPjlw5N5tH/ZTKSi5U3uZJZ3JDMb5rdZpc+lh8:+anJVS61eGHJPjlwb55/ZTXTenZ36Tcr","tlshash":"9ba16cf54164257be08e23384dbeda401ee96e60b37b3d3344183ac0a559b8ac83ec6c","first_seen":"2026-01-20T21:31:25.227877Z","last_seen":"2026-05-17T20:22:31.649316Z","times_seen":14,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":679,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/eab8f0e847742fd328bb581299bd99ca.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/eab8f0e847742fd328bb581299bd99ca.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:39:58 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 37319 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 2857\r\nX-ReqId: MTc2NjYzMzk5OF84ZWE5YWYyYl9GNkYwNzdENTFFMDA0OTJGOTNEMzBCMUMyQjY2OUI5Qg==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 2857\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12412155\r\nEO-LOG-UUID: 12384153788795380404\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2857,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b879fd5189c3a037fa56d28eb3a98f0f","sha1":"82b275080b935b53fbe0949372118852ff9efd82","sha256":"cc8779ffdfb303c4bc5a55bdaf7b846497f452f91767fedbb8191f8078d418e3","sha512":"4e4d889d3107e19d2a12e257b5c14dfb9b893f280dd46facd6d96ac9f6a267c4d0c467148df90033a00d6b9afa17b88d8a84fcc0324d1fdc28c7b75eab06f33c","ssdeep":"","tlshash":"6d511b1b62510c1bc11e023f4d4adb263794d6047bcf2ff9e849397598b72f4ad26c52","first_seen":"2026-01-18T17:04:34.572346Z","last_seen":"2026-05-17T19:51:25.118603Z","times_seen":25,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":723,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/new-webdata.php?content=data","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SClT5EL5Pdxmjw6kdcIrALHCtK5yEHoXDqn6xE0jc%2Fyk4J2hK%2FfdJPFcaXKKV6IwIyqusWtZiu4Irvm5BxXjZQebeD9exyytxyOlt0xHoO3MkTO%2B56qoq1VmSGBJzXW6ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5079b1f9b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8cf634e63b069e34eb77480e77f84f1e","sha1":"eb7fb29de58f30582d37d46eb03d2e3d15807f8a","sha256":"4230d9c30a866abd054fc28c44c1b657a592c6d14092d1da79ca1a43865c7f2b","sha512":"369d3bec3b4d4054377637d03feae165806ecfc10ce13f9cff74533f5a45809dce98e3623e34da81642299c3d4fb264b00d7d2397fbeff6bea466119ad61ce92","ssdeep":"","tlshash":"67d07220f658ae220408aa71a0d440dd2a99776bce09c1248400842e2fa602e8aa5706","first_seen":"2026-05-17T19:29:45.571591Z","last_seen":"2026-05-17T19:29:45.571591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.files-text.com/api/accounts/avatars/1f59e049-ee60-47ae-8538-6b0fc57318a2/50ee77c9-8c7f-459a-aedb-33db6c50914b/a7fc285a-91be-46d3-8d0b-438f9f979016.png","fqdn":"cdn.files-text.com","domain":"files-text.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:23.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/accounts/avatars/1f59e049-ee60-47ae-8538-6b0fc57318a2/50ee77c9-8c7f-459a-aedb-33db6c50914b/a7fc285a-91be-46d3-8d0b-438f9f979016.png HTTP/1.1\r\nHost: cdn.files-text.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 27239\r\ncontent-type: image/png\r\ndate: Sun, 17 May 2026 19:29:23 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"6fc13d37bfbee281167b233198d3b8a5","sha1":"1ac01f2de02c2a62d6c890df138b57d75ab50ae3","sha256":"9f737a5111c6bc958694a4db40291c66b26963df2f0ec8957586bd09cd9b34f2","sha512":"65f5e3db38142feb061a725cb384b4bb4658276e7374b55ec6b0e92d10778364535ed2604620547753b4392757faecf0306009dd9fa3ce0eaf060a642b40337e","ssdeep":"768:1hlgBF05oarH/YmW/pt8CLygnunoPAzZzPK6zQ8hJBM:1Lro0HdStDeg+oCrK6S","tlshash":"e5c2e1527e97841f8f78ae871d6d472807b2f176d5bd88fb08ab61b47d220450ac048d","first_seen":"2025-11-01T08:31:13.84234Z","last_seen":"2026-05-17T19:29:56.023209Z","times_seen":10,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":592,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Yozh12iJC94fybRmuG6f3L4Jz1fKwwxM9f23CdtTIHs-1779046151.2942832-1.0.1.1-oGk7Pp8XJx2gi0dokmbT80xJ.ZoOyph38ASGlHQTG19DY6zHbiggDnN7G1rKERMDvYt8gZ8A428cd9tlwhKs7fQi5HfBMRsLWAlW_ffZMnDCBFBP8S1Nal8ikWCvpxaz; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-polished: ok, orig_size=7983\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 2115\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ece2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.77458Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=mOb8gScLoHmhzPTH9t.ZA9KbS.zrTEv_u9TREGo7H4c-1779046151.3121953-1.0.1.1-lgMN6F1uP0do1ghFSKf4xrrJSndePZ7zRzargexKZPtmC9PQ94VkvRyqfvlImJijqahSRiPNcfjdIOK15jY3xX6d9yD_79Fa58Vj47fZQZJJNZI42S4KDd2Bnl74udkw; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4417\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2718\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf3f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-05-20T17:43:42.768414Z","times_seen":2828,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=3nIiWraSWg0qpLwDPQB6yfeTSl0eXU_6EB5esyS1S1U-1779046151.2998717-1.0.1.1-su7gBm8fTmNDoDsvz7g._WUlhU9bJEdpMkwT.9DXdf5o2FDMaWi6m8bvIaxRTfenoBkk1Xwrsq7psN5lyMVzAoB_Id.76e8NqtlrMnMP3wl5a.U68RSAg7qjInyPH1Ia; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2410\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6392\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ef32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-05-20T17:43:42.967845Z","times_seen":2204,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/0b0e25267dabd15c405070329df5fbdb.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/0b0e25267dabd15c405070329df5fbdb.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:34:05 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 48692 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4537\r\nX-ReqId: MTc2NjYzMzY0NV84MWE5YWYyYl9CMEM4QkE2REQ5RDI0RjM1QjE2OUE2NzQ4RDg4MzdENg==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4537\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12412508\r\nEO-LOG-UUID: 6605232635908619819\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4537,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f860f362236a5175507ce735396d9216","sha1":"347486d5171e57ef310e9cdeb61f0832f4cc75ed","sha256":"23a2221097cc63e3cbcc5bde5850f7b9fe6098c5a6a838eb0f1891b2856c2925","sha512":"5b31a104db82edcb16718b3e65e51c96b5bf051281c653d9e6a5f130b8626525b0b155ad2930a47321a88e597312e009d8bef8a24d85c64c8e6b919d1336ff9f","ssdeep":"96:+aj4vrxBioOpFhDzq+lGHab7a396LRkYG:+asrryrhDz1Wd","tlshash":"8d914db335f70146f11e1bfa0c54c22b2268e9c517efb9aa5d8433fe81205b15396c5e","first_seen":"2025-12-28T00:53:20.199237Z","last_seen":"2026-05-19T04:00:15.701025Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":595,"dns":435,"connect":22,"send":0,"wait":22,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/8c03e57af9e8bec20a3ed2f5aaddf78b.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/8c03e57af9e8bec20a3ed2f5aaddf78b.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 04:24:50 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 58685 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 2616\r\nX-ReqId: MTc2NjYzNjY5MF85MGE4YWYyYl8xMUM5RjhGMEVEREY0MEQxOTZDQTk2NkEzOEIyNDNBNQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 2616\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12409463\r\nEO-LOG-UUID: 4718187818474940860\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2616,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4c50e5a25e144a871a7b0c0b04397338","sha1":"064b49e4bf750ca5b157be9d00f3f5db35d30220","sha256":"66ba0d00b6a1385bfafa82aff39a9bf20f91117acf3b5a65220b0af7cf9fd529","sha512":"b7d03f0a7948b4af3a170e5a558edf23be65ada53d9c8f23b5bbb900de75b02478f014e8fb94fef6b2154e1824ea661af1c264e39c2fa2b9bff042b9e83a5e8c","ssdeep":"","tlshash":"8b511a2012b81c31f48de1f101c86ae627739625b1abfebc7dc17215ad9db6a14174e4","first_seen":"2026-01-04T14:37:28.839412Z","last_seen":"2026-05-17T20:22:31.676699Z","times_seen":15,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/images/logo.png","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 05:48:39 GMT","end":"Fri, 03 Jul 2026 05:48:38 GMT"},"fingerprint":{"sha1":"22:AB:76:03:C8:31:31:EE:D3:61:07:16:3B:FE:5C:33:43:95:DF:6B","sha256":"9E:A1:0B:BE:9F:85:A9:C1:B3:FC:37:B5:62:99:56:37:EB:0F:1B:CA:3B:83:50:CC:CD:97:39:7C:DD:FC:A4:F1"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/widget2.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 05:20:42 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 32346\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiUd5IO7hyeJ1hSsDXvXVo4XK9a%2BlAFIa%2BwC283qG9W0eagvs8soKdq%2FtW6zul%2BRr35dv2TpUm8Ibe40JkLcdlD0mnsO0n8QqDgLQYnITTRhnn5HDI7SFvgzY3xz\"}]}\r\ncf-ray: 9fd5079c6cca0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1402 x 530, 8-bit/color RGBA, non-interlaced","md5":"088707efda21e9c3b5b88ffd840b506e","sha1":"0a9adca5e4ad442ea57f6f67663c67ae5c2e28c7","sha256":"d48fbeed2e913efafb118fe6c973a4ffe70d30f5e77403325d5473c4f7b50bf9","sha512":"71cc4b94e0821a842e3006db79d2a9eb1e0d61739608f769941079151d28f1501dadae366d57dc82dea99e7915ce8c6f9e20fed5d814c69edef46270f6d99985","ssdeep":"768:OoiwvJSVtbtAXjtABsfNR+OQ9wdO7tFvO9pSx9m:2whSfbtAXjtAefNR+OQ9wdsFvOv","tlshash":"23e2e1bc1f8c8c00c1b150fcaafa81d315aa7f1b5151e5cab1759c2f9ce2d06be74298","first_seen":"2026-04-17T05:54:49.138927Z","last_seen":"2026-05-20T17:43:42.782127Z","times_seen":297,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.D20fknPD.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.D20fknPD.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEi8PyJ0dT5Ud1xyZBHpY1D6UkLtwE4MhOsKLWSKOH9h40K02qLcxdqkW1eREa_dfyH-Lt23mCA\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604264768\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7900\r\nx-goog-hash: crc32c=vH60zA==, md5=irz9aUK9CUqazUtbqqJZIA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 3017\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7899)","md5":"8abcfd6942bd094a9acd4b5baaa25920","sha1":"5b102fcba3feea9b649b78cb3e930fd6e1e6d72b","sha256":"d6930c65835d81ddd304fedce8516d146704d27ba7042420da85b15729ff2f0e","sha512":"9e698e2b58a1b2ac080801d4382afa6b56b1fa2b09df4a424c2bf015a8a91e2369c231d09f75eae8914634ee1fd59f1ee9e6d7480717ee7a4b22e3e1b6c4f8d6","ssdeep":"192:Hj7LbrRc33jyJybQI/rsGUWlKZfZwxlcz7X5tXqjdEUyVqmh3q/La+UFkn:D7SjyJykcsGUWsVzt6dEUyVqU3qj94kn","tlshash":"8ef10abff381f4b1a3eb94e0991a0103b9390655756d8070f62c8e54a16e6c4b277feb","first_seen":"2026-05-13T11:24:13.340271Z","last_seen":"2026-05-18T10:17:36.469884Z","times_seen":466,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"1f59e049-ee60-47ae-8538-6b0fc57318a2\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\nset-cookie: __lc_cid=085c3614-c5ca-4f1c-8366-a077e9da733d; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 17 May 2028 19:29:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=179486e5033b6dde8835b860f2abc1b73e37abd5bd656aa934d6ca2766884324e6adf4251e00ef23ec053511d748171f7e918c768b799d5b1236c0325bf1; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 17 May 2028 19:29:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=085c3614-c5ca-4f1c-8366-a077e9da733d; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 17 May 2028 19:29:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=179486e5033b6dde8835b860f2abc1b73e37abd5bd656aa934d6ca2766884324e6adf4251e00ef23ec053511d748171f7e918c768b799d5b1236c0325bf1; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Wed, 17 May 2028 19:29:15 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1779046185\u0026tag=6e530e70310008f45f1d324cbe8d13eb6d321b82; Path=/; Expires=Sun, 17 May 2026 19:29:45 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bed80f5262c3becd1d6a174846aa8733","sha1":"a2d2234d3d42e72a6924826d73e30dbe271b3c4a","sha256":"9b1c7793c4db7f262a802fb419509a536000b673f6ce4bf55cd27123fe825ff8","sha512":"488c7b5b742f80d53f1d1a382bd9530d8d3be136353de52776f9d4d2f5a83ac54e352c18d74b1de74c74ce2941bc8ba4022e9b215a009d43c7744b162771b087","ssdeep":"","tlshash":"7cd0224a03623c824eec268b4d214769622a212182c8008f48f0936e2c2de32670b289","first_seen":"2026-05-17T19:29:45.576743Z","last_seen":"2026-05-17T19:29:45.576743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":130,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/provider.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /assets/provider.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=qMt5ATDy8.h2.drMOcfcnV8d1L6H6NlBZQh6OCIaKJg-1779046151.308109-1.0.1.1-lZKPgYQj3x821OQhGGNGjGUDMCLS4Kpr4EQL6laSzVzkd7dEiGy1VN89t6QS5rHV_qn7KG6O7d.2hc2q2rB0FPp53ynK3i8dIEhUsCIF_PKvWRa4ZuIXisb498VSPB2v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45004\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Apr 2026 05:32:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i=?0\r\ncf-polished: ok, orig_size=86197\r\nvary: accept, accept-encoding\r\nage: 5818\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd50794691c56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a4521dc3997a47388c53ccdc0637e135","sha1":"18641c7ea473530d314740b206116d0b6b733c69","sha256":"864acc556b68f0f3119f8da3aed1dcd2c8b1597878fb3743dfe233a43ae23235","sha512":"1933768bb8ac177ba672c09fc6af4da7645f80f3562bfa65f4e83dfa1981ceab7f070b7d696cd5f6ef1e03cd89d1c1f14e9374d3afd1851cd7c9699c4291024b","ssdeep":"768:T9F+NN80ZsiEkul+jt7tL+7+7kI0XGBS+Cad2oOb/Dv55fd18dU4yU/1LVYPwR5:ONN85om+jtl+yAI0X6HwbLvzf8dU4ySP","tlshash":"cb130208e94f5566ed73c0552fc07ab2fa3ec193a881b76c12afda9342674f28e0dd14","first_seen":"2026-04-20T23:16:47.047131Z","last_seen":"2026-05-20T17:43:42.86379Z","times_seen":408,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/otjuijet2025/slot88ku/user.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/otjuijet2025/slot88ku/user.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/json; charset=utf-8\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"1134-4m92e6yPZDxRnHkLz2iSCiiq0CM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\nage: 18640\r\nx-served-by: cache-fra-etou8220177-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4404,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26b8607097f2cf384829e1e708ac3571","sha1":"e26f767bac8f643c519c790bcf68920a28aad023","sha256":"3ab50d3f9140e403bf4c7d67bc48022a467f2a2d4a9ef4d7e0c160768f4c4f5b","sha512":"85bd3b87ec23602dfa768f6a878c170f463e8618a73e1b9e18cbedc00e12aff1a9223a0da16d995420ef85e29dfba58b9e603e0cc2f84e3e6b0dd6740fad39c4","ssdeep":"48:DNFHQ4JnUSxG8oPMZPN7yHQm3kZWFCJhtWHga33TnJR+Plpb4JrAf7b0Bbg:BK98KQV5ZcCEDQvaCN","tlshash":"5491a44e0e8b86fc38d9fe434783b27b659f75702706093358b9f628562a068b534f31","first_seen":"2024-04-14T16:22:27Z","last_seen":"2026-05-19T10:01:36.104495Z","times_seen":486,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=sqtvJwYkvy_xJr07A0EOMpZaEN2OBQGb2_dKGUBdUNY-1779046151.2955914-1.0.1.1-1HqibzeTD1nzMlVnM2Ny1Kty.ysQdAKeZt3xwLxWEd3WfKHUinoWP7zCewHNRdwzkIK89_RHlvQs7IwJuSkZRVuLb3SJfVgKFx6Ge90QNO092zP4gY3osZ1qDv4v14ht; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1967\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6629\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9eda2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-05-20T17:43:42.854913Z","times_seen":2333,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4764\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=9kEPS7mujGgL.YLw.dDvWcHwRWNpDOd1mMw5SlchFVA-1779046151.314984-1.0.1.1-DMDn9TKVODdAke2idhaQ_Qb1wxcjpm7XzhHcaTwc1PbGwJ6D4IExjOAgNTcp3idRDEl_NBTWhfn16_NmogESWb9QM_VitGJZ9Hn2E22Wk7EmCZrRb4yCDdYoBvY9bMek; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=6850\r\nvary: accept, accept-encoding\r\nage: 2927\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf5f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcc8214161918b4a6454d0012185214","sha1":"ef1cb58cdb13c4eb20d829b0a1e5c0c7ad07f1a5","sha256":"50bd32098504e3e1e509c05915be1871628a9486e8d76b84f13384b27df09c62","sha512":"80232fa4bb935ba30c39608c09de8d0092f8a755017025b43466991cf82665d7da23e98170baec45aacf6de7b67e0a652e9e384404b2a1e1e44193a5f60d15c9","ssdeep":"96:5OAObmsqYZpT6KVsJjm5Odtk0HxVGBvC5wyJ++D/Vetw:4isqYbu9q5ONVbxJ++D/Vetw","tlshash":"0fa18f3e4236d24b80457babc61d963a7753358ed501feb40fc32752d1758f602816e7","first_seen":"2025-02-01T22:41:26.02949Z","last_seen":"2026-05-20T17:43:42.950557Z","times_seen":2418,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165204.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165204.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188741\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:52:04 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE6V%2BURyUYhPTLZeyCNFgzk2VrkDorJcCs6XpQZgIWY2yLZA%2BhjRFLBsE2MsG8Uhu8GAZG7jXGVZABUe%2BfjTzoYX5J6lWJ7toTqDI7GucPwh9ZVG2NeFp2%2BDenNI3vFCEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"064b3cc789320ac195500fe4d67b963f","sha1":"055ac68843ff73d0a8b1ea7e766961e2268530f2","sha256":"e5b724ead6d025c7751466f308bb494ec3e9b82fffe82fdd8a0a31711f0667ae","sha512":"3a9a5f819135a4a35ef6f3e2fa2f97e0a61783d5fbe708e6e1ff20fee71db52b38c6ead2e23bd4edc1e9b40608604068a2465019655462ed076a5a4144c9c797","ssdeep":"3072:mqPyHiMWMGjF0ZbOCKdFwrHOumLgI8Mn99SsV7zqHOFnmnPUOBNcrVa9HQwFvmm:mqIiYW0kCZrI9+U5nCUaYVa97vT","tlshash":"a3042351d3036c5e79b9732896492c7c2ddcb4c43ac9da4ea047f4d7be14a6bacc92b0","first_seen":"2025-11-01T08:31:13.837907Z","last_seen":"2026-05-17T19:29:56.024757Z","times_seen":10,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/jquery.marquee.min.js","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /js/old/jquery.marquee.min.js HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDzW4AXABjYqzLeu%2FdQjTfjCsAOMrVgYfZgkaAY5bnuIKfAjVT4j%2FC1QURlKjYLMWA9pegIrKKOSDCaUjLHFVPFRpbxnLQuBjBKs9Ca2%2Bj%2FcB6QvpUgqH9Mj7GEI8xtA6A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d280a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1219)","md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-05-20T17:43:42.778141Z","times_seen":911,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cmp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-cmp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 06:48:05 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=m7IRxf9qOlvR8gst4FWp_ws6Vy6E2PntlTaRhmUIMik-1779046151.298662-1.0.1.1-BOUt4WlqPvlcTsrht2WoOWMJ4UvdzvY77fHXQv8PIhRDcbjWn7I2ttSRxwOLbwCs76N5JprKB0uy.bZPQUrqf.U4uxcQ57eoe.palGppVN1pKzzROsoAxbZt_IaN4M8D; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=1995\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 4523\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9eec2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6cb4315352cd82704bcaecbac64ccd7","sha1":"66af4e4de0848500ebc2641527e5ee8755febead","sha256":"67f9d63b2ae81ef3a719dda19901f66528e948c662a58cd2822d679918ade617","sha512":"da4a2f79032ebdc382aa5e20354502c9ca759b7e3820e85675ece4a2f809818d221251a2497b04ab025465cd1e6e65d5aa82367bc6fce7c10d72da4981f61efc","ssdeep":"","tlshash":"b711e698978898aceaabe09d9774bc3a4c0c223ab0009109a4b20dd5520b2603864fcb","first_seen":"2026-02-13T23:33:55.556628Z","last_seen":"2026-05-20T17:43:43.041936Z","times_seen":829,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_1b4250cad04cdb145f4866af24cdf301\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:14.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0_1b4250cad04cdb145f4866af24cdf301\u0026language=id\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Sun, 17 May 2026 19:39:14 GMT\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\ncontent-length: 5544\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16379,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (16372), with no line terminators","md5":"9118ae2efffbe0182fa7233e94894846","sha1":"61b4967e00fb55cb9f8a16ea453bd723ba9521ec","sha256":"8425705e29aec5d75ff1616303a9e3b5c9b01f4ef0781911a0c6f03937106906","sha512":"58d836289876e356944b0f7edcc67b5dd6ab1dd93faa8ef38523300e6ce80142a806239b29a1967413382ccbaf3110528c6d7b6c65aa434ec6ca9c7fbe8edfbe","ssdeep":"384:kwODwsFulAqVUr2V9DCKlFZmERbo1DQCBuLdAeA+qSJ0L:7ij642VvFAnHuJASIL","tlshash":"f972c9644dbab96e0b1753d6f9db9d1d2cec33646b441a2f9e844f3002c17c1736aa3a","first_seen":"2026-05-15T19:11:21.51654Z","last_seen":"2026-05-17T19:29:56.031685Z","times_seen":4,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\nage: 1955904\r\nx-served-by: cache-fra-eddf8230134-FRA, cache-osl6538-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-05-20T17:43:42.987501Z","times_seen":4368,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":2,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=nqcNJw5EoNd9Z4be9l_FXpYVEOc.U_Zx8OC.MLlLP4Q-1779046151.3001494-1.0.1.1-x56dQ9_pTeWDfuVrMyZE1knlJ6U8RczufG9GLGPsRFMx4_ATysr9k_s9Itbn65LCRdYzyu2RKM8CaEk02XMccwhBqr_FxaaVG3BmJL8QdtKK1lKZwXFlHCNLXFr8rgaN; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1595\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ef62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-05-20T17:43:43.012422Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: __cf_bm=nSmsjgcFF1WjLZUhKOTSFRbCsUnN9tL5OrwWE3y29nY-1779046151.3042183-1.0.1.1-XRBDLxgVUAvh_Nvd8.zsSNpQop9UEWRKpljpc7aOOmWLQSFGIQ6Tz59NRlExnRt.nw7cMcyuYb0G.ba93lWIHDCTWkw2WVaKXmIVrfZfJ3JX0qrLHGyVF0wzkERoABKG\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1628\r\npriority: u=4,i=?0\r\nvary: accept, accept-encoding\r\nage: 6739\r\nexpires: Sun, 17 May 2026 23:29:12 GMT\r\ncache-control: public, max-age=14400\r\ncf-ray: 9fd50794893d56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.949019Z","times_seen":2252,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=pUy2obHQa0HEBsg_fcRZYPlGcRrL5U2G15Xh3s9CS.c-1779046151.3098247-1.0.1.1-_.N_a9PyV8fKZmYYxYg7BOKbIyS5NKHrYHhaizM2kx2t378P32qqCDTcpEpxA8wRrEOjWIoh3eqsfING2dOZVcmZ76NvsnZb.wEjcJKWRmSoc8J8DWTmk1CqB2Mlnick; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=5084\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 1428\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf292efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.027889Z","times_seen":2920,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/m/capreg.php","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyaJCOfKJMfn92VI%2B0HSVH15iMJpxHhD16udSl0P1RwPEKkf%2FTBIWKRxLMfsodNCzFtBhFvmGwnpQG0BSrg29igIjJhHK06BHk2CW06Oy%2BgCspPzUhpEGHuoeQcTh6CFfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5078d788356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"f75a5d8deb8bcef848219b966f02945f","sha1":"62ac0a4c9ed2da5d6175705374b530e40ba983d0","sha256":"20e6219f35dcf21c34f5b968889b691bab763fc1cd024c7c1ced3c6b1a115b7e","sha512":"a2fe4078780660907ac90b73d1b8110ed9f8088a357d7f1dc2e79c6928ead2ce9f578c2755199162d8897d1fe86d66bd4c29b3efa2903ceb6deb58797c5cbf07","ssdeep":"","tlshash":"0b512bdd4010c88102d3a9587c5e4e671dbb24f45464900697ec5ab7b0cbff81af54d5","first_seen":"2026-05-17T19:29:45.585712Z","last_seen":"2026-05-17T19:29:45.585712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165049.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165049.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 193214\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:50:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2276g%2BPCS7JCjulvMTifeee%2BJQ6pxYs3%2BHeXympjVZDENQGOloqxE24a%2B5o6OjztuBCHyGVSAgrHXihJtk70olL0AO5A6Qb5xMEL66r4%2FF8BQUyqljosB6T%2BQa2g4ugtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"2c21daefed506485e2fad24a55e6ef9b","sha1":"69e05e559e1ec960d5a9518b3c71a549eca6e609","sha256":"441bc74a5541aea9d291562b4398ea872932f039e1140b2ef9764291c330380a","sha512":"fe995e0bce3f3b6781c9eceb6cf46014d30e1b53ed399776a006f8c9b9740fadf2399d35bd0db163b631c1ea9595cbb37d83dec0f4c8b5d808e6c372b4a2a688","ssdeep":"3072:QKMX83JCf7iSKs0ZujAHfvJA2JMPoZV1pAlgZVOM+vnT327ZnXbx7jEH3VV:VMX85Cf7RKsOusH30AZrpAUOtnrWXdjU","tlshash":"0e1412354ec1db0af3f4b65e00da5f7f402d26a1da4a8464761e3e38b619c7a6cc02bd","first_seen":"2025-11-01T08:31:13.810664Z","last_seen":"2026-05-17T19:29:56.089018Z","times_seen":11,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":465,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=fw1uiBFpt4dhXHqGEySfNfHg1HfjmF57UVpeoFcRFmE-1779046151.314714-1.0.1.1-0xv3mL9qXdiLPATvzS05fUtjQiSV0_qc5Bi76.SOj8xwwwLUfEtf6r2Zpu2NeeT4IsKx8I9dl.9aC7zfo28lWtRSovWn70O6BucVyK_lLFKigIseCpvvCI31B0zuLaIW; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=6991\r\nvary: accept, accept-encoding\r\nage: 5841\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf5c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-05-20T17:43:42.947479Z","times_seen":2430,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=mGKyIy_GWYe6vScfypj.HM1IbwsGiSDOmWs4ps.hjZE-1779046151.3110273-1.0.1.1-7HFs_UpNP2A_3J_7_MSDZvNUoBh5w937QnHeRn8gted6JaA6qMYb4w1F_jjnBnCDX8a.ooDob2sQFhHBity85SrKP36jwGB0sAhPmYCl9kqyfbBImRRtlBs9qsqJ3oRx; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=5768\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2086\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.02325Z","times_seen":2919,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fkupon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 33048\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"38aaf-dXWYf3DuXJH2oOdxs4xlB+RXq2E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\nage: 2724888\r\nx-served-by: cache-fra-eddf8230212-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232111,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1b1cb0e2be9a21f091a87691f20c6300","sha1":"7575987f70ee5c91f6a0e771b38c6507e457ab61","sha256":"d85327d99c7a3ee1f9b5d0500d1370acea3ad2db39c163c2f51f232baedbdede","sha512":"d9b0500a3727c3ae7c2e1a389e55c971ce96915fd4c6913fb00a246d73f140d1aa98d750ad6aadc36e8db3d90517fc86efdda9291d52c7cfd8d4b7f55cde0628","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41r:EnXp9GfVV98II6V6pz600I41r","tlshash":"123482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-09-04T15:51:36.002152Z","last_seen":"2026-05-20T19:56:50.890969Z","times_seen":2709,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:13.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fkupon.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:04:20 GMT\r\nexpires: Sun, 16 May 2027 15:04:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102293\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-05-20T20:33:05.722894Z","times_seen":6170,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=IqVrRfapSE9MmoDL4GXcP7OVBVAmi8BotFi_9EoDNdI-1779046151.2990716-1.0.1.1-kzkqiyYgBUByDdAD3MhXuKyQxdCIbdT13AswY.zmJ2HjuFcS0C0l._1tv5ByHtSJEoYGGTNhw8y6fS5i3kXey4hvQ672y9Bxxz36mo7NjDhbyXIC1koWzHNNNLOivANe; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4157\r\nvary: accept, accept-encoding\r\nage: 4114\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9eef2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.011616Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=6IHnH0OApMDkB_57Ys8duPD4aTVwMViHz.m9mBdfOQQ-1779046151.3077996-1.0.1.1-iuucL3lYjzq2jvmFA_OrgPb3C6jTkiN1VmCfbBSuPJ_ARJJb8T3j6n1g8QpViVQE6b5voatK82fWibwMhm.81_d22c8vRQexPCDJ3VL3lYS8YvfzYL9A61BvrfZm51ue; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2970\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf1d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-05-20T17:43:42.971643Z","times_seen":2898,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sports.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/sports.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Qpv4FqTabDMDCOtB68ve3NZ9OTJjiG2.XKOa7pdHVlo-1779046151.316809-1.0.1.1-nFPxbfjqnCNa6jofWpbyK.O7imkRw9gjAr0_R_2Cmzqz9lXfEBTNS2GT2J_pCMme5cTecxsGK2CxGi45SVmYjRU2dHPT2w6DOVtWKazOq3lICRCWXfQj8RtvyuacXU.o; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=3789\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2793\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d70a305bde0a2cd5afb3d14c5055235","sha1":"97b47a1a205c9c3759e2aa0e7d42a8eb8c94a691","sha256":"62675e8d3f1ecf4c407ec5d846e07f842347e69f44835c5612d23c61f0b59577","sha512":"7fdd2042c9efb3fcec6b93704328103112be80bf2e10030227ab1a5906ba6d30f4675b89f025d8186353a9e6a72ff3c99e3941ff9260d1e90a46012db530ca37","ssdeep":"","tlshash":"d2f0c280c300250f8aa41d8ca74ca42e4360ab82167c712e03832eb473ed10822b0270","first_seen":"2025-11-19T10:28:57.200422Z","last_seen":"2026-05-20T17:43:42.776575Z","times_seen":1351,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\nage: 1073785\r\nx-served-by: cache-fra-eddf8230113-FRA, cache-osl6536-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12963\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95609,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-05-20T19:43:06.38599Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":2,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1324\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Aug 2024 05:14:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=E5yJvj9.OvoGUIw3tPzFxFb8vT58lexp8Gs5MKC1H.0-1779046151.295019-1.0.1.1-yJWDzr4oq9GNTwQUwewOZ62bGDeiAe9tm_WzAO6KK7O0i2QFT3YRfdkLk0Y50wtiD9S8XsW_8neeH5hLFUmh5RbIP_i6KlA7Fxtz7TFOMzB0on8JtMUpKapRppSFt317; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2957\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 4634\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ed72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0db329565ff7fa54709c6b982d143079","sha1":"86787749df4f0dac3c2aed2d7ed03c12d4e9f9cc","sha256":"a56b49bc68bd936efed2bb75c474cbff5aa6382bb4db26ea9ed393cd3a846b3a","sha512":"23e85ddefc5722b311bafcaf8bcf198dc28da94cf904129af1ce7795e2bdb38e6930feda2abf2d9ea1fdc2e8ae0d1b8bfe7abb7d0102db4366d3a65455b4bfe1","ssdeep":"","tlshash":"e421d5206bd3894c865fd608686ae401257b725a5d24fa7b0bfe16338f3f0608428919","first_seen":"2024-08-03T17:27:29Z","last_seen":"2026-05-20T17:43:43.039788Z","times_seen":2548,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Ib19JjkI78XcBhmprL3XABiMDknC.zJHRGTO8WLYOis-1779046151.3050125-1.0.1.1-rlzwPF19QgvsGSosntPCcRXjeKEa4YCItFSWicpgvbiNAWyjHUqddc1fohTSAPp4BPUo_4qNDoT4Bl3PzCBg5wQ2HVwtzXvpZMRuQJfg4cb0bAVmCZ_Dereb00g6DGW6; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=5584\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f132efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.840498Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/css/old/dark.css","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /css/old/dark.css HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGlNqDEWdttc5jEt2T9dTLUtmvis3usIh5ynMfXqdmaSXcUL94GoPAdtbD1G%2F0t4jGiKaMKYHj96YQLxBALkuwOxqs63O1rWlqWJ5Q5veYEP1iQ1DK0vwUPZOfhnXSN4tw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d1fed56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"86d17c83b9f26e4e35110e1fa926122b","sha1":"4959ca9d6a847e49bc7ae81a92e7ff54e838dc99","sha256":"def6cdc4916ce9b9b2c47692138560782cb330f9aee6894243988858624180db","sha512":"f948d9bb182d8f2c5b84a2389c750129e97c073885cbc80218bae04dd1ae8bb0e2f40acf333877006aed6802d76433f22ffab13a64b5ff930327a7b12aeae774","ssdeep":"","tlshash":"f411bd79805f543a323fd8ea37dfe93ba270a85bc003ff15b6d470866f00298a222402","first_seen":"2023-04-27T11:32:09Z","last_seen":"2026-05-20T17:43:42.880633Z","times_seen":1842,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:22:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Djc6up7fyiexe2Q7xQq9Lk9vZcmTDqUHXb_FbR8icSs-1779046151.3119624-1.0.1.1-dypjdd46z4IFLtPulmlaYlLCklDoJeFpJ1zj9AjXX_KAwKI.PomNA7zzWMtsO9C0DT1XjyBdjvznSOn9cO3CRhvRz2PUT20Euuxiqnrgk.QfIm7qD4mgDv_w3VemZeXL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2903\r\nvary: accept, accept-encoding\r\nage: 3416\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf3a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-05-20T17:43:42.765082Z","times_seen":2854,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:14.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 756\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"a79e1a207ec609c732a6f87aa055a0fb","sha1":"c6ee3f7c0730f73f3f4ac3cf9220474e94be70a5","sha256":"240184991bd266b4d13983641aeb31e3702bb1ec66051a0fa8dd15e4ff06c67a","sha512":"505fe457e683fc814dd2e75af0a0d4f1070176a8e67b0eb4d2b6674c3e0586e755be021523076bffd82de9053c5beeb150c0c7048efa279cd627d6941916384f","ssdeep":"","tlshash":"30314173aa10c91d71748231b98bb08e895d534e8644acf2b29522fe1ad0ed58173e29","first_seen":"2026-05-15T07:12:04.83978Z","last_seen":"2026-05-18T10:17:36.680216Z","times_seen":281,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.C5kjnOh8.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.C5kjnOh8.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEjr4CdtRekDnXQOK_L6g5nu3BkbzOMr5C9zwu9QmHeJOAC8e8UzTNKYnU6BOMNOe9Xz8cdXI9w\r\nlast-modified: Fri, 15 May 2026 07:03:23 GMT\r\nx-goog-generation: 1778828603775349\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55782\r\nx-goog-hash: crc32c=3v2yGQ==, md5=Joq5t3Vb5U2HJV4EStXjlQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 20075\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":55782,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55781)","md5":"268ab9b7755be54d87255e044ad5e395","sha1":"988cce9466245135b2de92c2e1b47341663f8ca4","sha256":"4c3dab309d55b21ecd7f25872bead1131f109a52b26fa5bca8507ef627d2984b","sha512":"16fb0c3ba594c904503984ed7b0e1fda39a5b72d6924229d8ce76338346c340f9fa7dddf92d065865b358f266ecf3b2134dccbf5d9a81f300e73cdb4d051d140","ssdeep":"1536:GIrqgq37RvTh1mmHPW//sQE8QOe10qS3+wX0t:vENbh9O/TQH10LNs","tlshash":"5b433bdef181743167e715f2a07f9002b73a2a2c385c81b0f629dd9925da04ba277f6d","first_seen":"2026-05-15T07:12:04.840916Z","last_seen":"2026-05-18T10:17:36.592454Z","times_seen":296,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=CJ73Cl0NgU4gm_JCPaJ6agjMq4cEk.e3qtEbhpzDcPM-1779046151.3012547-1.0.1.1-bBI3ewO9k3AcNrbosLrZuevA8wFefaGpl8rc977ggx9q8cEsxQjpzgEHGcEbmFN4DcOajtxuEL3K4Lxzje68n5dxpAqbWjX.AVqXVTJlxHdF9ZXLZ7zadSpn6J0oYymH; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nage: 5633\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9efb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.73708Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/0dc4b45524350a50a4d3276a2525693f.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/0dc4b45524350a50a4d3276a2525693f.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 20 Apr 2026 05:00:41 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 1166224 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 8458\r\nX-ReqId: MTc3NjY2MTI0MF84ZWE5YWYyYl8wQ0Y0NUYzMzQxQ0U0N0ExOTQ1Q0FGQTFFOTZERUI4Mw==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 8458\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 2384912\r\nEO-LOG-UUID: 9597636768577397738\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8458,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"885dfa838b9a791f40bd15a01dad44ee","sha1":"c5b810dd75326d4dcb4177267ae70f3c6e3bfa1d","sha256":"572f0f2c3cfdeb707b9d119fad86e6008131ae97457c1a93cb072d1e0cc5ffa2","sha512":"f09ec02c33c591f84028c0e636821daf4e7698c5ea01e3320087e082b6c17626c3e6450492653843dad9cbe522d55e51458ee172378cf1b47e890461aeb16c85","ssdeep":"192:+aaGUMIck0cYYBUb8o3g++14cY4OQxIDfEGfyuEY3vlKsYhVzJY2m:HIcyX5TNEvDfEGhdKJh5J0","tlshash":"de02af1361ed0d65ccaa4cb9d8dea3bc3459f69c46aaf7c5a5cc7138b8b1440c54de34","first_seen":"2026-05-02T07:53:53.57332Z","last_seen":"2026-05-17T19:51:25.162088Z","times_seen":25,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":705,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 14:58:29 GMT\r\nexpires: Sun, 16 May 2027 14:58:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102644\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-05-20T20:14:09.221325Z","times_seen":7271,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":226,"dns":2,"connect":23,"send":0,"wait":12,"receive":1,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=pIbduaVhZhqF52i528AlHejAvcZfYKxz7zYBM6vYidA-1779046151.3008773-1.0.1.1-YFfE0w_Y2rxLdeEIBTc1t1XwobyKduFz4YLyceQjjtpqaotfvGFu7ar0g4gAV0zpWkNfdVqIEKe1pPpg0rpKdeV7daY_uI.sVY_g0I0Eq.eTajUf0XztkjPzU5JdJvA0; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4930\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 7153\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ef92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.016217Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=zFW7pgtAY5fG5pz3Xm.bCOXLiVH54YiGcJnx_5knckQ-1779046151.302103-1.0.1.1-AEupFrCiG2N1u5xLGKZW7syoGiGxBAnGU01MZFgv6q2Cttk17afdXS1aqJRYHnLECUlKUxnG4bfJo58BgK_pIEtSloSEE47XG7in85xodpBJzz8ww4iw._F3RNSmNsSM; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=1589\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9efe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.823914Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=kxskbxJLXkvKYvqPgknKDY74rKIkrR.Uj_astJscCYY-1779046151.3086946-1.0.1.1-JQyIQcWRG0zwJfI5z5gQdsZXic3KX2xDb_2vCAXYlaNk4NbwdnnbeY1nvYvnnJbG6A8GIqnhOwAapE1d1U01DT7RaJ1iNJKP_CZ7M6tGGSjam.UYid62NNRXA9zMkmlT; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=3573\r\nvary: accept, accept-encoding\r\nage: 2294\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-05-20T17:43:43.01797Z","times_seen":2834,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=H7DSSMgH8.plau30ry1VRyQppumAtXH4nmu6pk8KYpw-1779046151.3047168-1.0.1.1-Yompo5MI.tz1xNm2IaMwRe_UIhIzXjS3zm4MUJE.EY7HEc7haXE0UopKoltUDeAKXGY4FHCKI91U91JjmzFXP6ofcBiwGv4L696a8ijcjTQlNt4R_nHsK3NZkbHJQchE; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 3815\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f112efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.770223Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.1vdvOulH.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.1vdvOulH.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh_A7cn3_PIprauKB0l_XpIOi-BzxC-WUNvIsq25wy8_RHZRULeL9Gowz6Kc2BEfj_3rnePWjA\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\netag: \"5a8fda3642e2ba9b25e3f416feed07dd\"\r\nx-goog-generation: 1778828604368192\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 432\r\nx-goog-hash: crc32c=1iY9Fw==, md5=Wo/aNkLiupsl4/QW/u0H3Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 432\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (431)","md5":"5a8fda3642e2ba9b25e3f416feed07dd","sha1":"d1dc52ef887451929924b389017706af55f6c273","sha256":"223555a74201b2fd80bf1e4ffb9c51fe1a90270ef1db767217631bb1ac020435","sha512":"4015b0a57c9bcd5a089b8ba031da9f3476781d606f9668a43d784a1ae966ff92f72d3a27ff3660fd0d570002642e48102e6cff4c9cd42982472a87a8a7d507b7","ssdeep":"","tlshash":"f6e095cba20039e3f299dce5c454d0a266f697964be083b0c1cf137153a0126ce14946","first_seen":"2026-05-15T07:12:04.958033Z","last_seen":"2026-05-18T10:17:36.515786Z","times_seen":281,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":22,"dns":1,"connect":2,"send":0,"wait":4,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\nage: 2113638\r\nx-served-by: cache-fra-etou8220122-FRA, cache-osl6538-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 121296\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-05-20T17:43:42.87679Z","times_seen":6751,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.B8U2wfjY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.B8U2wfjY.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhEfDk65N3QvfPYtzbptsOHSUHZsEXZ4naLKEHG-jmDUxZ_KteOS5FAuLuAyrCpMylv\r\nlast-modified: Fri, 15 May 2026 07:03:23 GMT\r\nx-goog-generation: 1778828603811925\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 135409\r\nx-goog-hash: crc32c=09fYvQ==, md5=6/zNWwVWt/NwCTfENCNPkg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 40116\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":135409,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50220)","md5":"ebfccd5b0556b7f3700937c434234f92","sha1":"f1949fecd9d3b9954310b0d5bd5beb75282a71dd","sha256":"6d43875cade9d2b3a81eef3f3ddecac90ea8bc3ee21691a4da98e70df41fc13d","sha512":"e1d6a3a833081daf449c93907ce27802e37c8e19f26baab07e756094a8f7d75958429038f5f7f20ab28731fc777a54fb96c5b08c719390f78225996e5b53c77c","ssdeep":"3072:vWCPJAo1gbchIp5p+P8fiCkC8xMQbiHBmq2/j6/j1JK1rbaf7B9RBg:eYVgoq+8fiCkC8xMQbiHBmq7JK1rbafU","tlshash":"67d35b943282f57087f39097a87f530bf2b92d58b409d930e4b8f4e975e4146e1a3fa9","first_seen":"2026-05-05T13:06:27.407961Z","last_seen":"2026-05-20T20:44:30.353807Z","times_seen":1521,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=11RxZjnYUotIZEMoQJfyB.vKXwzi15meny10fYA_kl0-1779046151.3005788-1.0.1.1-wjcKMkxtrSl3X_j7YiU3W6Fq9M3jCUt.Ts8uGidZ35rKkX8FOFjU5Id_StA7ZR8e1t5t_xMjq6BNG9oVn5S0DGdfYqylXcNYwxwpxWcJpWtf1Xkf.Tz_y6UbBAGOi0zb; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=7765\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 7153\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ef72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.988544Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165113.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165113.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188956\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:51:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN%2BVv9QyUhFcR2VW92AqFGBBsBHnFLikgkCRS69O3BbxPslzz2lbs6hiXejDrxPi1lFuJ0GuBIDy0%2FZYwAVVyOXhK5bIL1aavt7Rwdh%2B7MQ3egC%2FWAasD6lGO4ZEqSyiFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"2918eef1d14a390f46a45995ec44ba81","sha1":"551112a4befbcbbdb3d61b43b4fb7f829d3fdc9d","sha256":"c84ba29d89c89bc1111290fb8ed942bd1e4a02213a545ece66c1c7c7812982a7","sha512":"bf1a9fc8aa8070ec2aa67cf00d37e370ad97e576556122475bae263cd014b3234addad3d6c46f5c17c8f875a265bf18bfcb29969ada4753ab8fbd827f7193faa","ssdeep":"3072:QwJmtxlJS8kkPwyF5LjvtMPEMp3F5+KUCxYgFuIB3wAPXQrDFBKZ0UisV+nGkb3G:QwJmDMyPnsEYf33ZPXMDFBjjY+GkbP1s","tlshash":"1e0412bc9031a4f49fbd8d55c7fa737a7a01d825394361e5b6821f39269dbe8a0338d0","first_seen":"2025-11-01T08:31:13.782083Z","last_seen":"2026-05-17T19:29:56.034858Z","times_seen":10,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":533,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/c7140efe06d93642fcc9805077c49aa5.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/c7140efe06d93642fcc9805077c49aa5.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 03 May 2026 13:25:26 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 41371 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 5098\r\nX-ReqId: MTc3NzgxNDcyNl9hMTg5OTgyYl83RDMzMDQxNDJGRkM0M0ZEQUU2QkY3MEJGNTQ4RTMxNA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 5098\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 1226540\r\nEO-LOG-UUID: 16414882127023493484\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5098,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2899b8fdc41860146b21ca6d70a50df0","sha1":"7c8b192ffa27d8eeb568f1456a5ee51c3e5d35cd","sha256":"d61955dc40f6f62b991987a3be24272c746123f4070eb4eec9107b69d03da75e","sha512":"09c64f96dc4c2f8761b066ca76e7579d195629eab6e71eeb4d5a709e321d9672ff7bf74277cc7c04499f05b9c9132e37dc757facb99c5e0b7294b6f3e4b6ca3a","ssdeep":"96:+aj3yww/RsHt8wsxcvNG6osb8WZXGAbtIcSI5UFqT5USkkp4M8kMQG:+aj1dHqxOYsb8WpyRI24T59kkYkc","tlshash":"1ab17e208fb55980d96e08b8265d4d101bf37bfab3962cd6240e3734877d1f3986e536","first_seen":"2026-05-05T10:46:25.486055Z","last_seen":"2026-05-19T04:00:15.680784Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1420,"timings":{"blocked":638,"dns":436,"connect":21,"send":0,"wait":23,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/777d0840066313da8c0f85977e9178be.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/777d0840066313da8c0f85977e9178be.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:30:13 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 51437 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 5644\r\nX-ReqId: MTc2NjYzMzQxM185OWE5YWYyYl9FM0Q0RjU5MTVDRTg0N0FBOTFDMEZDQkM0OEJDRDVGQQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 5644\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12412740\r\nEO-LOG-UUID: 3027332282098617618\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c79875acd698d7b1aba9de1a5e9df903","sha1":"8cb3a605bcbbaba6bdd9ae0bb47410fbe24df1fb","sha256":"adec1e0d89b92cbfa5efed9b28248c2de70e5d22cd6824040a1ae435959d3401","sha512":"d1c48b942606c4a3feee858482e4c22f6331ef2fc7da455cd597de7955288120c31d91e9ec7398df05c1f1537f7d041a5fca92e8934a8656e8e3b32c1e5fb6ca","ssdeep":"96:+ajQvY3RJD5hGR8QFhVNQ2d9uX6APyX/GqZtvyKvTpBoDWUxU9znTmp9l:+aEvYhhnGRzhI2d9VgkTLTpwW6YTmnl","tlshash":"dec18e6447fe7a1bca3fd2714c06e3132a41d659e29761e5bd012b7268341e21e30bae","first_seen":"2026-01-04T14:37:28.531422Z","last_seen":"2026-05-20T17:43:42.898124Z","times_seen":85,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/js/old/jquery-3.6.4.min.js","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Bu4t3ClSmoQmrdLgC%2F8emHlB3MnE%2BPSXjmm2h3JTnS%2BXvjIhQJjId4EEdQRJTo8NJYRY%2B8cBaGpK3OQTse4U2RPIo%2B0Up2JctXcVTK9LLrNMj36Ta%2Bxndjc8OL%2Fan1F4Q%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d280656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-05-20T17:43:43.022389Z","times_seen":3231,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/logoweb.png","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 66318\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERMAcICAjSn%2BuJJbChRZXo5H4MBXcLL08xzJ68J%2FeCvbwuudUT7xyCzh%2FykgU%2Fo%2BMnAC9M5r1AVCwhDWsOyHN329kMKDYdPT7plphNx3SRFSpZyI4qC1wV1GaUaGx439yA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd5078d788156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 148, 8-bit/color RGBA, non-interlaced","md5":"a8d11469d5f4abcfef1d52f7f00b8dde","sha1":"0290d732847295313481a3874d73c4045652173a","sha256":"a800e7b7b5d338e001fb33d8e100e1495db2866709d0fa408d32208788bd0248","sha512":"f4758f890b2b9e5d5c6bbfb62992e516999fe19758c6bb5dace27c855373a5ed37dfe11e6c3def689d064a09c56054f72b5433bf5ef43ec27edf9ea034b940eb","ssdeep":"1536:IJEoRptQbfq16xQHglG5z5pA6HYjJ+MbcLqjVhAr2t:iEbbfq7AU5pYjoMA4P","tlshash":"c953025cbc09dd44c56baa215a9b501a5f33fd8952b11fe0f187ce8c5a1322de0eafc9","first_seen":"2025-05-28T13:20:26.430748Z","last_seen":"2026-05-17T19:29:56.081305Z","times_seen":112,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206165023.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206165023.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 205664\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:50:23 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FU5Pv7GtbTiHoZmBlyFMPWjY%2BvMn%2FEkQ9yx0K22WMdIU5Lkw76Zcm3XQLUcDzLs7sAPFkP4KCudOHu4FcxBwwmiSSq5l78ZHMsP2LDR8GHqzSS7ukRCJhRhko2Gils6q%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"b44720906749600d3efa1c2ff7144cec","sha1":"e126d9eea38920c3e1b8efd1cc4da90d2c0be4a4","sha256":"46fe277bb0825417c3816ae0ab21c37a7cb4e4ab3c44178882641f69a2c3c0f0","sha512":"4f248169ce2eb7b4b2f0107fe371a7dbe6eebab5a526d9f7e52caf95e30b63a882b2b00ce8762064dce5c883045ddde5984a2050c284504a9d1d0ed4ddbf6728","ssdeep":"3072:RUSNhfgPfK6f+DO9GuHyOt8CL3AOanWyfDVY7a5+bWn/oFBBNVw6oGKP61wVcMs8:1fwKxYGwpZQOanWyZsaoi/65oDwMs9u","tlshash":"2d14128d523d8c85f1b7d73645be5b423e74be25b360b24903a6807a0ea2351e7c7c67","first_seen":"2025-10-24T14:41:50.552838Z","last_seen":"2026-05-17T19:29:56.084271Z","times_seen":13,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-SlidesMobile-20250827233604.gif","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-SlidesMobile-20250827233604.gif HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 434986\r\nserver: cloudflare\r\nlast-modified: Wed, 27 Aug 2025 16:36:04 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgF5fnedY0zPZ56hqZaZ%2FbpeWnWB%2FDAxiqa5DSnfzCHMNUjqRcfOAcfxIEqJpFK7Ms%2FoGOIuPhx151AGzIGoaz2V0pC8ZDsaK89pQ1pU%2BqROEAR4hjt9oSUBBSi8x2iEuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507942f6d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434986,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 200","md5":"020338bdcd641f1f3e69d500cf5e0ca4","sha1":"b780d90849380df978ced591120895207844e432","sha256":"a217fbd0804b851d02c8cc701f2e65f4ddfb8ceb65b7f55031edf4d6821ef080","sha512":"ce158eaa5c11fccbc7a5e7100517dfe48fb2efe32ca609458f143142f2038c76184fce7d6751092433e1f68323c13070de287fa962ff5d1bfc51718cd8e1d04f","ssdeep":"12288:jR/sFT0pBX6LqOyGHvEYIFgk+TCL76jBOF:V/swBXEqOLHsHFgy7oBOF","tlshash":"d094238dc65658f72d6f5976ed1f6006c2e314cc87254e50e48eff22e2c2d39aa2d11b","first_seen":"2025-11-01T08:31:13.841653Z","last_seen":"2026-05-17T19:29:56.054087Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":691,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/616bf242a532f72e970648f2ead423cf.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/616bf242a532f72e970648f2ead423cf.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:33:19 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 117477 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4691\r\nX-ReqId: MTc2NjYzMzU5OV85OWE5YWYyYl85MjQ5REE2RTI4MEM0RUM4QUU5OUFFNDMwRkQ5QzEzMQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4691\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12412554\r\nEO-LOG-UUID: 1967086551572068752\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4691,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2e3cef86c421332b7e1306f4d70941e5","sha1":"60364c06afca4c1bc4fbef5083510fbce792915b","sha256":"cd7c42b3168a68b3f169823cd95cf88d529045abf23bb095110e08784ac555cf","sha512":"8eb43f40fa240eed53391be609825d64e4b2e42de50064ea9caa1f6ae0dad1c1fe52acc29a3d39a8b505fe1694fc25dc9956f7ddd2d29f0bc5c09bbd9350ece9","ssdeep":"96:+ajgZ5R3OE1tJvF6eBeBcWlYS+u72dyyA2d0mDkR+X:+a8Z3vdNk+2+yObX","tlshash":"b6a14cb530754df4d034137409ced6f37a36e76123afa1b68ac033076510baa9f5ca40","first_seen":"2025-12-28T00:53:20.194423Z","last_seen":"2026-05-19T04:00:15.727509Z","times_seen":62,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-static.com/api/file/lc/img/rich-greetings/handwave.gif","fqdn":"cdn.livechat-static.com","domain":"livechat-static.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:23.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/img/rich-greetings/handwave.gif HTTP/1.1\r\nHost: cdn.livechat-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 372763\r\ncontent-type: image/gif\r\ndate: Sun, 17 May 2026 19:29:23 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":372763,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 460 x 300","md5":"b833044c92652fa9fab0e3210c3a57c4","sha1":"47e4ab00ff06878f861d731ee9f0891beb7bad88","sha256":"d368f73655941321fa294f8c0f5d63f0a6caaab3dccac499800b4e2e49358a51","sha512":"4f46bb8319c32dba7db576462cf6ed7329950c0bcebc80f14517a157d1b244526145ddda41814a83f0b41806a4fb4cc4ec33cadef82511daf46540f77884666b","ssdeep":"6144:Crs32NvcWwZlIhPDqvN4GS4bDzKTzIsiMB8etGHL7RNnADttE:yvcFbINsN4GScKnIsiVztNADta","tlshash":"d784126127a95f3efd3a38b4452e52aaa01c5802dcedc13e5ce8f2d167833168865ef5","first_seen":"2023-04-09T13:57:14Z","last_seen":"2026-05-20T20:37:09.713748Z","times_seen":3307,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=tQX.ZfQaq6DF62MEJs3caM.NlBeAIM5B6UyQqzraybE-1779046151.302737-1.0.1.1-DNA9iSlrJI0C.Vigi_K29riNRX2t1k4C028O0t2EytIDLR5KdaMGxSXBPnoiykl3hzyKM0pG2ReTzuxZHNOtTybzzzUDWCQOM4zLhX1VhsvJyS7ar4HPBl0xgVihloo9; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2786\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6817\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f032efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-05-20T17:43:42.830247Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/assets/hubungi.png?11","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 6150\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Sep 2024 03:17:07 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfG4YRWMFm7Kh8tiLLBy24aPwxbWlK21%2F%2FkGHJWqZfNIzNaccFDATr%2FuMfuhpeFeTlOjh%2BXONszbjcNL7cb%2Faa7P7%2Bkn0N7r8d2BmqT%2B2H0Sq79RCGSL4DWBNiu70nADOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507946fa256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.899599Z","times_seen":3353,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEg1ULZv-R7IkP9bn6Y8NsSCe8ktU7tK6LATHkOT6mxdqMorOzPDm-eeEMZqwXKNhuRU\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1778828604273661\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-05-20T20:44:30.343391Z","times_seen":17136,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=kTHgLuxPnEAjSeWwbtLvnvRauk1Fg3m9.Bd.yhvYa5A-1779046151.2979715-1.0.1.1-qYDym18fH6L5rLEphz0IOQy8gMsLNLY91xzxqPMEzFAo6kav0Z4bqymSsQ.T2EB2Gva6A1O8OFEA06h2vo7skoXMU_m4I4ZEBIGW5XK2t87N2I.kt.tU.3S4rpFj4y9a; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 1325\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9ee72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-05-20T17:43:42.830247Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/favicon.png","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 72231\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jan 2023 02:44:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jeuqarpq1EbujgcvkXIGS7rn3jLSEVoxCN46EmR%2B9rDk40HFw5K9o65WiQIsbctJ65nd2zAiUAu%2FfmwmF7U1svUI15mxAlV%2B%2FBYXqyyT9p2JLsCHWRGudbOZonHYB5rRLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507983c3f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"df4fe17c35885b4c3ee31f0a5ad5eb18","sha1":"97dededf1399b6712460b660ba8009e141f204e5","sha256":"a90c51b1bcd819981fc9641130e3c1b1e7e831b07c0fb6fb8381402e0a8f4b2f","sha512":"3d3f00af265dd0532c12d6e32c8bd144e5d388d76715aad19a680e7c3547154902f07600c3e8f7cbd5b767e9a3d0b7865ffe4509e40460f80c46bb15bc7041a0","ssdeep":"1536:uV829u8MRxzyxtMbHMM9xqPGvr7CShAp9bvkFSouW:INtuxzH7MM9xqPGrG/JcS9W","tlshash":"e8630118fd78ee20a8d2fd0b19de219050365cd2e8d694877c5e5f8b1f696096f2b0cd","first_seen":"2025-05-28T13:20:26.416853Z","last_seen":"2026-05-17T19:29:56.035375Z","times_seen":131,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":164,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=TziVKYoQYARw_9Uje44rvwi4Xopv.tb3gY9F9xrhkqk-1779046151.3023834-1.0.1.1-0FoXYVoEHz29UPZ.j2lHY08pneE6ard3OxLkdEzwyDHgosal0gJReawBv2M1BFmvPh0cisIjROU7jcEFW_0NtK1WcVQ.x2fRSvhN90QviO.SLGoSW_7lJOBPElUkMFpL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=9511\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 2789\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f002efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:43.028645Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEjEx1VznC4V8h1-NTI1Gvbwp8ykl2OWh27O_tqo6Z9H5R9QDE3b8XV6QKh4IdDTK71b\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604573137\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 104098\r\nx-goog-hash: crc32c=54IXgg==, md5=FXxy3oe+DI2vE/PMSUjxjA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33614\r\ncache-control: public, max-age=28800\r\nexpires: Mon, 18 May 2026 03:29:13 GMT\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":104098,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"157c72de87be0c8daf13f3cc4948f18c","sha1":"6efe257e13665682424bc7e0713dac1a5da3b7ee","sha256":"5a3ec5d4503fbb1ea9f6aadd984ff9008be696fb9ea19278c31b67f61240df17","sha512":"312be5599e0eaeaf77077ea9276e29561f810fbf6e2ce8af0f9639940e64ef11241c92eaa9103192fba55d104ae825e5dc9ef34f5190b834eb2dcf390859f9c1","ssdeep":"1536:EFmAvdDrij5ZJC9/YcF4buegHEBEKX5wp4Z0F006FHLF7RbacQ:EwOdDujHsN4bdgHaEtt6FrFhA","tlshash":"d3a349d67282b03453f789e7a1bfa212f3396918340e8410f17cdc6a395a9879177f6e","first_seen":"2026-05-15T07:12:04.856747Z","last_seen":"2026-05-18T10:17:36.478609Z","times_seen":327,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":197,"dns":71,"connect":1,"send":0,"wait":6,"receive":2,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/style.scss","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sz%2FseN6kyWNzNBUYjUuUO5gy2bX%2BhHXIWBAwg9YUMKlTUCW%2FbXi1p%2F%2B7oo5Jy8dI0INEafAtHxRqnnuhOjvLFfP7wPA1vCvD00uybsZastiaC5ITgwM3NZ4vFBOht0HPMA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d1fe056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T01:55:13.470731Z","times_seen":15504149,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=6BhN9wgzaSNjcAsSVnDiUe3a4Voj_hGDNhFm97KNBps-1779046151.3054175-1.0.1.1-M6_CgEClubXvZ6XCMNE6FyBSBOhsnHcn.F6fzkuQfKyuDsSAXGWV0xO.iAoMUg2X3YSfuFk6J4h92MpyVf8xI8DU4HHfzRRqYmrRH84NQSqCyZarZ92L2Bnaeg9T9d3A; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1584\r\nvary: accept, accept-encoding\r\nage: 6063\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-05-20T17:43:42.929923Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=735h20xK_pUy6reXWTaFg6JYsPVdh2xXcHngmBu7t5w-1779046151.3125005-1.0.1.1-7w9kfhyaYKkAc5UlcoXvZsVQECUitZ5QdT2M6zUPGTW2vF7KAQH0i9FkGG_TX1ZDHUpijhabd_IC6UxKMlHmxxocP85hqOui0sgl25Ss0d.6nH4SjeZ3gC3EVJuWNWgW; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=3284\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf432efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.770223Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/b593727321793084b1f7804aebedc31a.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/b593727321793084b1f7804aebedc31a.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 09 May 2026 02:57:09 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 512514 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 3637\r\nX-ReqId: MTc3ODI5NTQyOF84MWE5YWYyYl9DNzZDNjkyMUI4RjE0NkZFQjVBMzE1NDg2MjY4RUNGNA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 3637\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 750724\r\nEO-LOG-UUID: 780220191103205963\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3637,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"107f1fd91a87503cf3ba3932d09ea602","sha1":"311a6823cb7c6cf1e84c01c6ff4ad7eaf796dfb4","sha256":"0eb978d3e8536259f82d8e6679a6f19306fbbece5ea387ecf7bada54286617cb","sha512":"d0c1cb76be5ff472872191b9680e4add4ce60efc386dd0e0895b894cf6b2fc79147c2ad10acc478c228aeb302c98ab8e5c53efd1a176c372839e65d3b1c74bdc","ssdeep":"","tlshash":"aa714b0d27f25de3e0ac92bd01448e1152f8a325b323f9160459bbb0abb933fd442e54","first_seen":"2026-01-04T14:37:28.485743Z","last_seen":"2026-05-17T20:22:31.736823Z","times_seen":36,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":702,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-static.com/api/file/lc/img/rich-greetings/handwave.gif","fqdn":"cdn.livechat-static.com","domain":"livechat-static.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:21.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/img/rich-greetings/handwave.gif HTTP/1.1\r\nHost: cdn.livechat-static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 372763\r\ncontent-type: image/gif\r\ndate: Sun, 17 May 2026 19:29:21 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":372763,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 460 x 300","md5":"b833044c92652fa9fab0e3210c3a57c4","sha1":"47e4ab00ff06878f861d731ee9f0891beb7bad88","sha256":"d368f73655941321fa294f8c0f5d63f0a6caaab3dccac499800b4e2e49358a51","sha512":"4f46bb8319c32dba7db576462cf6ed7329950c0bcebc80f14517a157d1b244526145ddda41814a83f0b41806a4fb4cc4ec33cadef82511daf46540f77884666b","ssdeep":"6144:Crs32NvcWwZlIhPDqvN4GS4bDzKTzIsiMB8etGHL7RNnADttE:yvcFbINsN4GScKnIsiVztNADta","tlshash":"d784126127a95f3efd3a38b4452e52aaa01c5802dcedc13e5ce8f2d167833168865ef5","first_seen":"2023-04-09T13:57:14Z","last_seen":"2026-05-20T20:37:09.713748Z","times_seen":3307,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":4,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/f0856c1b16c32245a8d2c702ffe89ac5.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/f0856c1b16c32245a8d2c702ffe89ac5.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 25 Dec 2025 03:30:13 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 58602 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 6027\r\nX-ReqId: MTc2NjYzMzQxM184ZWE5YWYyYl8xNDQ3RDFDQjhDQjc0RERGOERFQkUxMTMzMkM3OEYxQw==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 6027\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 12412740\r\nEO-LOG-UUID: 6387166041739932972\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6027,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1be7b71b3522878d3b1569fefc294aee","sha1":"dcecc02f602513390261ef58bed142ac9c2020f6","sha256":"8ed5a3e5de8942a51bbcfc6d63779781ddb9febeee89b542b82b29c09c3122d5","sha512":"58c5b5075298266eb1fd038dd760347adfd9a4f1cb5759b6d4c48fa4f802330fe5076d69e99b944d2d22e046590d3cbe960837e68c795c7e5e6f5cb21a3b584d","ssdeep":"96:+ajU0yT/xXSFjlNzvHXWeMAVWlQNhF5+dT8WSmT3GD/rdM9nw/Pb2VeGIi:+aQnpSr5f/zNhF5+d4/eGD/rdwwiVFIi","tlshash":"b3c19e2fe396484ed98f48741d39866b1761c227778b312144437815e562febd22db4c","first_seen":"2026-01-04T14:37:28.486801Z","last_seen":"2026-05-19T04:00:15.701628Z","times_seen":41,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":683,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.6/customer/rtm/ws?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/rtm/ws?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: q1KFdWS9QZ5A0TBxrnJAfQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: EQVekYbEJu5QUijBKH2FqS55mbY=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Sun, 17 May 2026 19:29:15 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T01:55:13.470731Z","times_seen":15504149,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":142,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T19:29:10.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toV1%2BsqK9vmZftOPi2FgI51CwqlK8HLYvk6wXMJPVviwJqDNAZG5Owh%2F%2B3cc7R2cLeT2ejeJRbvpy8%2FDaFIcLSSh2aTGKd6gzaV6tgV%2FlQ7tkS0T7tmG%2B5%2FTJ30LbwS3dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fd50789983d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":330054,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (514), with CRLF, LF line terminators","md5":"78c9a0ed3caba370b77d19cefcc2cc88","sha1":"0a8792af6dd3f1006ec8b5e706fbe91567cdacc0","sha256":"23de0f5a2c3d0c3db88b078d3ba0e62e2ad2eccbe2ed71bb8354fe1647992a81","sha512":"ec1ba1bab55e77d1cd1595d664625f1011dadad179237d56b18e33c30a8229073077dc751771955c50e16c97217b346c66995ce95f43bfb3ee80e5b2a82d9e05","ssdeep":"3072:LNmCB281DgitAkn2A5Sb7qUpOs46KrHK+Ux:LNk81DgcAk2OSb7qUpOs46KrHK+u","tlshash":"09643f2140e1106361b391e4ab725f0aff91da07ca0b8a0476ec9bd65ff3d56cd236ad","first_seen":"2026-05-17T19:29:45.614709Z","last_seen":"2026-05-17T19:29:45.614709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":67,"dns":48,"connect":1,"send":0,"wait":364,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=ux983R6SWg9k1OBFt8hz7P7TTmAytlWRvs2SfReNzY4-1779046151.3100762-1.0.1.1-wdh4gwkGV7MM5Pb3Q89LV0efsd6FE3Hjjr88I85_oAMP7WaH0oHQZ0GS5O5CBVvuv8CIATZb_HJC_DEFGwvpXV.ffDi8ZyrhNpIVT9_jOYUjxJqNxzigVK8mFDotLsv6; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 6220\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf2e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-05-20T17:43:42.770223Z","times_seen":2917,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=0mku0AA947aQyoOFPu8Q7XoppKfiH5Co6GVUHg2HSJI-1779046151.314123-1.0.1.1-FPf8hxakdAXj1PS47TqPYvhaqlSWgB4LD6LpfO0SBp3vrCpuAy0A4tZaRSB5lv2BZ11wUsFwj_phLkJozuLbwCgbBHRS5kpp1kfyMv40EG0eWC1ic5Ao_uab1aag7y9S; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2786\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 3526\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf512efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-05-20T17:43:42.830247Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/92fb3cf79ea2ba919b94b04668e13491.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/92fb3cf79ea2ba919b94b04668e13491.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 29 Mar 2026 15:15:50 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 3894930 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 4776\r\nX-ReqId: MTc3NDc5NzM0Nl84ZWE5YWYyYl83RTUxQUM4QjRBOUY0NDNDQTE1MDkzMkE4RDdCOTNERA==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 4776\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 4248803\r\nEO-LOG-UUID: 1529740983215166837\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4776,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ac7165bd78e60b16ec90bcc1ef76f30e","sha1":"a48b108424f9f027b2056e3bfcd4e3ccf4d5d05f","sha256":"682a58ea4380075b91771cbfe30cec7274f6bc2df90093fa69b34972478dfbe1","sha512":"cf1d4dbe1faf52eea5d055302551096093cbe1aafb6c9613cc41b3402ded137b545fb9fd7b1647c74be7a1e7e1e655861d152838517077d5326a3408bc0979c8","ssdeep":"96:+ajvDJwPWCviDdg3LDhma1o4g8EGZ99ZlN06mQYoaByBnyfPC4kP9dkX4:+arDJSWCviW3PhmCg9GZr7N06YxBydg0","tlshash":"89a17d496baa69acd99412350ec421110643cf3872cf387e0ccb36aabd642d7e275e5c","first_seen":"2026-04-05T01:22:50.528824Z","last_seen":"2026-05-17T20:22:31.639215Z","times_seen":30,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":636,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ik.imagekit.io/pwwc9yn4c/Telegramlogo.png","fqdn":"ik.imagekit.io","domain":"imagekit.io","tld":"io"},"ip":{"addr":"54.240.174.124","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.imagekit.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 22 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:8A:6A:40:5B:EB:4E:98:B8:8F:7B:11:50:B7:82:1A:41:96:CC:CD","sha256":"38:E4:87:60:37:CC:3A:5A:FC:01:83:79:F1:F0:17:D1:2C:40:48:94:55:FB:CF:49:8D:0B:0F:6F:6D:D2:34:C0"}}},"request":{"raw":"GET /pwwc9yn4c/Telegramlogo.png HTTP/1.1\r\nHost: ik.imagekit.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 10082\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: *\r\ntiming-allow-origin: *\r\nx-server: ImageKit.io\r\nx-request-id: 1e8414b4-dffe-4fd2-9b19-328b2dbd71a4\r\ncache-control: public, s-maxage=31536000, max-age=31536000, must-revalidate\r\netag: \"b3e710156a1b08b4d561588a79f8fbe9\"\r\nlast-modified: Tue, 31 Mar 2026 01:01:11 GMT\r\ndate: Fri, 15 May 2026 19:10:39 GMT\r\nvia: 1.1 cfbb6e543d97587a32117dbabb25fc86.cloudfront.net (CloudFront), 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 226NHoyRJDKgZgAiNVzHaSBfqKaDudc7fhWJLo6lK39z1V6jFSvAtA==\r\nage: 173913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"ImageKit","description":"ImageKit is a real-time image and video transformation, optimization, and delivery service with built-in digital asset management, powered by a global CDN.","website":"https://imagekit.io/","common_platform_enumeration":"","icon":"ImageKit.svg","categories":["CDN","Digital asset management"]}],"data":{"size":10082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3e710156a1b08b4d561588a79f8fbe9","sha1":"1f01ccd76977e8bc59906e2c83f7d745fa97d56e","sha256":"81ad97082380bec834549e3a0c0040810b3139a58185563c2b99944515372978","sha512":"9cd153e37da19f762a6c33643f39759ddfb466fcb99c53713c0631ceff7eca4be297efecce45cb6820b1a207d5f41ba27f5d192dfa1cc79a715cbd26aab8ff7d","ssdeep":"192:S3YzbU5vX0Fe63pVsKgAsxJKDV3a2UTs2HZCrsCgWvkL8Zu/:S3Y+E9pFsxUDV3aCFNq","tlshash":"5922bfa2b44c8b84a1c6e6ac3ac871c9ab1ed3779c5620c4f874a2f15e6cf367578940","first_seen":"2024-09-19T22:40:01.924884Z","last_seen":"2026-05-17T19:29:56.083033Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":3,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 02:17:06 GMT\r\nexpires: Sun, 16 May 2027 02:17:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 148327\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-05-20T20:31:20.685265Z","times_seen":13411,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":234,"dns":4,"connect":20,"send":0,"wait":14,"receive":3,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fkupon.com/api.php?task=getTotalPool","fqdn":"fkupon.com","domain":"fkupon.com","tld":"com"},"ip":{"addr":"104.21.15.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fkupon.com/widget2.php","date":"2026-05-17T19:29:14.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fkupon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 05:48:39 GMT","end":"Fri, 03 Jul 2026 05:48:38 GMT"},"fingerprint":{"sha1":"22:AB:76:03:C8:31:31:EE:D3:61:07:16:3B:FE:5C:33:43:95:DF:6B","sha256":"9E:A1:0B:BE:9F:85:A9:C1:B3:FC:37:B5:62:99:56:37:EB:0F:1B:CA:3B:83:50:CC:CD:97:39:7C:DD:FC:A4:F1"}}},"request":{"raw":"GET /api.php?task=getTotalPool HTTP/1.1\r\nHost: fkupon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fkupon.com/widget2.php\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Requested-With, SSO\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ku1HW9cW%2Fx6JAil2hhm4EhKuiK6QcIgT2Etx%2B%2BbFh1CA3tAkKtXpwih5TNbC7PsLUOqH2Y7FMOqhrUkCWyFqAtaI2vZLn3Rch3ROJ0XFbp%2Fqs8J%2Ftp9G7DjZpSj3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nage: 51\r\nlast-modified: Sun, 17 May 2026 19:28:22 GMT\r\ncache-control: max-age=60\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5079ecce80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e201b8c6a57469b1d994920381abf8e2","sha1":"8a62da5d3c41ada3bdd18593d5af8374446826cf","sha256":"f5ffe8156e9a6560adb28539dfd365c817892dc62569056e6578b8f82e0b635f","sha512":"d979ed02608148f9a5859e1c3139f35d0e22779d26474f4106b96c662a7c15f7ee71fd5f4b70cb15572be1f6f79210065c749339a5a9d8e5b1231e9afb92b9cc","ssdeep":"","tlshash":"08d0a705c4701ef37a46f85025984148776521834c043d1536fc430c0f4c83f22ab79c","first_seen":"2026-05-17T19:29:45.618879Z","last_seen":"2026-05-17T19:29:45.618879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/slots.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/slots.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=yef3BMBLSsY590TmyCWHtDM7KwYPQATyxJ2F6CJpJxU-1779046151.3162186-1.0.1.1-rDrSM5EU9is0H1UokFfDeCU75UaA736nbiq8TpEeC5VmHD8zjbzTByt8hGte1tyd7ic.AvqbppdUX2tXlWOtT317FWjtRgAnTKdxY5JlNi1AbUbhp5mhvsOwhovaWmxM; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=3936\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 2674\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf712efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49004475ffe1ab21bd1d1845cf3c5bb2","sha1":"5f1b45dbf862fc3b31fcf2995a3d79c85db7e1a1","sha256":"bde4902504d927b3c8f18a0000db9dfd665f16757368d3e225e9c6dffb366203","sha512":"24376af88f7a418d0b2f6b56dd003515b34bb927d5a946171aa0e11690d5794bb41dc524994ce3a67bd5b90861098ebad29bbf565d262d215e4ddf7490577d67","ssdeep":"","tlshash":"440199f8a7e855c24830b90965600cbeccbfc75d3142ec0a27e154c531213e0e81038a","first_seen":"2025-11-19T10:28:57.236453Z","last_seen":"2026-05-20T17:43:42.812742Z","times_seen":1350,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/otjuijet2025/slot88ku/user.json","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:13.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/otjuijet2025/slot88ku/user.json HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 869\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/json; charset=utf-8\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"1134-4m92e6yPZDxRnHkLz2iSCiiq0CM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 18640\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\nx-served-by: cache-fra-etou8220177-FRA, cache-osl6535-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4404,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26b8607097f2cf384829e1e708ac3571","sha1":"e26f767bac8f643c519c790bcf68920a28aad023","sha256":"3ab50d3f9140e403bf4c7d67bc48022a467f2a2d4a9ef4d7e0c160768f4c4f5b","sha512":"85bd3b87ec23602dfa768f6a878c170f463e8618a73e1b9e18cbedc00e12aff1a9223a0da16d995420ef85e29dfba58b9e603e0cc2f84e3e6b0dd6740fad39c4","ssdeep":"48:DNFHQ4JnUSxG8oPMZPN7yHQm3kZWFCJhtWHga33TnJR+Plpb4JrAf7b0Bbg:BK98KQV5ZcCEDQvaCN","tlshash":"5491a44e0e8b86fc38d9fe434783b27b659f75702706093358b9f628562a068b534f31","first_seen":"2024-04-14T16:22:27Z","last_seen":"2026-05-19T10:01:36.104495Z","times_seen":486,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/12.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEhRZ1P0zcXvPZsGPdDl7l34yIVLb6UjFS4TiAR-b_-_JE_Rt3Hqbayr-gWerqUUalDUi7Lw1qI\r\nlast-modified: Fri, 15 May 2026 07:03:23 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1778828603811113\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-05-20T20:44:30.494547Z","times_seen":27706,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/images/upload-Slides-20250206164950.jpg","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /images/upload-Slides-20250206164950.jpg HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 207113\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Feb 2025 09:49:50 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITyrSNwQX1Z0pcWPlQWbF%2FarB3AHPDTYynQokuEPi8HjvouX1F6W4Kq%2F0IZ%2FMJhbCxkkh6uy6GQNTDXhtR3LeLy65IbMMHXlJRZ7C8S%2Bt4yAsP%2FGhlkSHkTFxjM64K8A9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fd507940f4556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207113,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"33005053e6fe91506a4684870136d5b1","sha1":"cc362ea3c718c314a12ab33ebd4b64891bb3b440","sha256":"bdff0ea553f88b943fdc392748563a83717dc8ea9fea7b6128e9ca8992f311aa","sha512":"d0fa5b8e9f14fb30f7310a67739bfae0b91c8e99cba5a9ed6d1c582a91e4196653229e9825821b1d657486ce7ef617d42c5ccc50643e19f03b60838e54b62295","ssdeep":"3072:O+a0Kxff74E21mToe+7O+NbLJSjO4SaBA2IZ0MLCtTb534al5gET7uvkqYcrdIzU:O+refzrrW6+gLS52zMu55nqYmIZ9leBt","tlshash":"e714125e56b0ca2fe1cf23a610ad26495613c18e81f7743f14ae1806273bbfb9d7458e","first_seen":"2025-11-01T08:31:13.804578Z","last_seen":"2026-05-17T19:29:56.04271Z","times_seen":11,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/fonts/icomoon.ttf?cobna3","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icomoon/fonts/icomoon.ttf?cobna3 HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vg123moon1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://img.viva88athenae.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:13 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 2971\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\nexpires: Sun, 17 May 2026 23:29:13 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=kV9AgSGcccRGp7wcHd15HTvM5fD4B8XFuy8QguNBU6E-1779046152.9695191-1.0.1.1-2rC.xAUq_Dj0BKSXsPxTceKBcqACwNerZkeVlwjfBsnfVYDwqBweIzb4FJzGNpzkJXVUscjZQntXSAA4f608kJaKlkVa11v.79kvncdE_XquvOXzlh_K3Sa2t2IyEYZd; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:13 GMT\r\ncf-ray: 9fd507980dbe56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"17755c1a595a6cfad8faf64d79bfb096","sha1":"9ff4edf4a135ad92d418eca49cbd5751595554c8","sha256":"6e24331ad054b14d877983c01ab24266e054eff30104645719b826988320b610","sha512":"3f96b5c63d673fa34d542c1b7e6b08b0a355e71529273f41928ec01ed594018f22cf3556b753a41c27719b9dc6c35a8cbeefa09859d9d657b22b21d93c77a0ff","ssdeep":"96:zwvCwULhT2cmh8bj6ZxQrNUGlSfcEvsR2oTbUjVl7ydkS/+nBvQmlPV2DG:0qwUMcO8bjGxQrNU6SUEALb6z7hS/gv3","tlshash":"8aa1e707c336cfcbc026e3b95c94d3824be1ee11a765d3a785484d45b61cba48d717ab","first_seen":"2025-11-19T12:27:30.59329Z","last_seen":"2026-05-20T17:43:43.046295Z","times_seen":1345,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.BfJowA_0.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.BfJowA_0.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEh0i7otG4yzfkhdbCNumf0_bd7Tbig1yL7dOMXQnM7PxU438pJzsgWzgqtZJN9OP4ILJUIiB3_mLmR-Bg\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604235691\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 207172\r\nx-goog-hash: crc32c=X3kj0Q==, md5=9Sfs53uDWKXTn69b9pv8xg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-length: 63838\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":207172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"f527ece77b8358a5d39faf5bf69bfcc6","sha1":"7cfff67026312e6c8ee0c2ab1ff774797adf8c43","sha256":"832a0b053ec1ca42d99b01eefbb8b1b2ba73c74eba903a7d736c797100965f0a","sha512":"4c8298995f0846ebc40a2982745b25683a8d466b324f5723141b4b3acf48f1fd47d0c8ad847d08793c0db30681fb4336d7b200aabd821db680bc28ad7f39ae9b","ssdeep":"3072:FdmtYfmF2FKLbB/57O5CxGWZ2Pfp8kE5MwfMH+rUqN8v5iNRawF3:TG+mt+5CR0Pfp8BMIrnciNRj3","tlshash":"ca146cc4f18ab93587eb34e2587e1002f63d6d18b44c8160fb5cdeb639a518a9277f2d","first_seen":"2026-05-13T11:19:36.784802Z","last_seen":"2026-05-18T10:17:36.499843Z","times_seen":491,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vg123moon1.com/css/old/variable.css","fqdn":"vg123moon1.com","domain":"vg123moon1.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vg123moon1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 08:51:44 GMT","end":"Fri, 07 Aug 2026 09:51:40 GMT"},"fingerprint":{"sha1":"03:2A:92:FA:69:52:46:FB:6E:F5:2B:F8:AE:D3:AA:62:5B:74:7E:C0","sha256":"0A:E6:21:FA:5A:B2:BD:DB:95:98:82:45:38:96:22:1B:26:9E:9F:E1:AD:7C:9D:33:68:15:B7:2B:73:19:E0:A9"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: vg123moon1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nCookie: PHPSESSID=95ca3e3e8eaf71a623eead8a6b744ed9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2K8IDlW8BHaBiJ5aoU0ouRKDgitAXydI99%2FhHn%2FeVRGoTl3h5NiWVB1Hix59OU5Dmxzc%2BArydFNJV7hasS1G%2FxHVbrHPhak8DAzdCLmWMQlHcPrKLM45IwX0hsPSyBPMeA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fd5078d1fe956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-05-20T17:43:42.834453Z","times_seen":2227,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=fBkZBZaEX7Rt5Hlz_t9Zy4rlIgW6dFUkcIcsRbMnr8c-1779046151.3038673-1.0.1.1-dP_G1j5OAuxkMXJc2t6c89ErPhaj5r3llBMiEkKTAa70qDQBVwJE08rxPJFpYu_14ajTgkuKzhu95veNWiQPqhmakSOIrU0uyhRQ2CDHMSW2s4j_dA6Q8Lk4HAKX64vL; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2245\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078d9f0b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-05-20T17:43:42.992036Z","times_seen":2845,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:11.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 19:29:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=MrATdXndu8COdCU6KYSKmACGAyQ8r2nZEvDcS_Frltg-1779046151.3140507-1.0.1.1-7.RLX4G74pBm4z6T6CbDJy2DO85BHiVM4sbSdJcfS_XkUc4I9m4.iQA5t7mcJLBoL8e1XwVlh5KTbvdKMg1HRY3mfKqD6J3tzvPMHJfFDxN4Pex5RCqhXaR1fkAzGTek; HttpOnly; SameSite=None; Secure; Path=/; Domain=viva88athenae.com; Expires=Sun, 17 May 2026 19:59:11 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1967\r\nvary: accept, accept-encoding\r\nage: 1067\r\nexpires: Sun, 17 May 2026 23:29:11 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9fd5078daf4f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-05-20T17:43:42.854913Z","times_seen":2333,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sportnanoapi.com/football/team/28e94925fdcc848f86a544a1cedcceed.png","fqdn":"cdn.sportnanoapi.com","domain":"sportnanoapi.com","tld":"com"},"ip":{"addr":"43.159.104.66","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:12.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sportnanoapi.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 03:21:01 GMT","end":"Thu, 23 Jul 2026 03:21:00 GMT"},"fingerprint":{"sha1":"94:58:29:BA:1D:DE:E0:55:AC:C8:2F:AE:94:86:A9:1F:0B:76:AC:D1","sha256":"FE:CE:69:79:D0:D5:FF:36:0B:D4:03:68:1F:01:43:03:CD:E0:79:D9:5D:BA:26:0D:ED:38:AB:97:E1:0D:BB:C1"}}},"request":{"raw":"GET /football/team/28e94925fdcc848f86a544a1cedcceed.png HTTP/1.1\r\nHost: cdn.sportnanoapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sun, 22 Mar 2026 07:31:39 GMT\r\nServer: tencent-ci\r\nContent-Type: image/avif\r\nX-Delay: 34668 us\r\nX-Info: real data\r\nX-DataSrc: 1\r\nSize: 2067\r\nX-ReqId: MTc3NDE2NDY5OV84MWE5YWYyYl9BMzlFMzU2QUFFQUQ0NjI0QUZEODVBMDRFN0U5QkFGMQ==\r\nX-RtFlag: 1\r\nCache-Control: public, max-age=31536000\r\nContent-Length: 2067\r\nAccept-Ranges: bytes\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: HEAD,GET\r\nDate: Sun, 17 May 2026 19:29:13 GMT\r\nAge: 4820191\r\nEO-LOG-UUID: 2311059852784326250\r\nEO-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2067,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"99177cf409b9dd4cab5815506da5ea4e","sha1":"31d29e69a241c23cbaeb39d1ea59622202762b1c","sha256":"7bf9240ffe8677e835d573bda2c36fc4a146eada6e64dd1908c14d24c0a4dc5f","sha512":"61ec044f5b5e8b5562b75913423dcea1e4435eaac672e9f5e7fbbf04aea3079cd0ddc613afbf1c42fc120ef29b0152df8da26438a3950e5c368439c8e2299ba5","ssdeep":"","tlshash":"9041c83d634058caf6f8237a089be32263609360536356a64d812ba99a74ee6c926d50","first_seen":"2026-01-20T21:31:25.108597Z","last_seen":"2026-05-17T20:22:31.680234Z","times_seen":15,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=1471.0.3.196.56.22.2.3.3.1.3.54.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vg123moon1.com/","date":"2026-05-17T19:29:14.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026version=1471.0.3.196.56.22.2.3.3.1.3.54.2\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vg123moon1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1915\r\ncache-control: public, max-age=600\r\nexpires: Sun, 17 May 2026 19:39:14 GMT\r\ndate: Sun, 17 May 2026 19:29:14 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6175,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (6175), with no line terminators","md5":"136ea2fbf9ae741155c361f085286347","sha1":"49baeec4259c196019e5a8c0191ea5efe11ba828","sha256":"5b6153e9f977474e2a7ae1582c90fe64671a2655be9947de975ec2235b44e421","sha512":"d5e39565c8456a546480b44a6265cdb79dd782a829e62cda4d83090cf8dc0d6b711e3b9886cdee7c0ae1be28fa24f793347958d619a389e8a71b7a2dd0181dbe","ssdeep":"96:uhUsXhUAbhUwhUS6qa51Rc7rGIfplKt017OYr/1PJ9F5tJuN7imGSmTf3PJvzaq:uGsXGAbGwG/qd79ROw/7YiHSmLxbn","tlshash":"71d16725435fc47b73b7915a62cb770e340c517db5f8193be4a0ca70a1861c7d302eaa","first_seen":"2026-04-22T19:05:46.367366Z","last_seen":"2026-05-17T19:29:56.078384Z","times_seen":6,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.BLfmipM-.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=14434575\u0026group=0\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=1f59e049-ee60-47ae-8538-6b0fc57318a2\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-05-17T19:29:15.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.BLfmipM-.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAVLpEji88_IS7YlBj_VfS3YRSAmTHmmeHtbcPWnuSWlkErwfbY1yQbUEyV19e4pQPl0HLxrax62UU0\r\nlast-modified: Fri, 15 May 2026 07:03:24 GMT\r\nx-goog-generation: 1778828604159079\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 21459\r\nx-goog-hash: crc32c=FblMsg==, md5=ygUZhbqlPsCF69kJbY+lKw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 7671\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 17 May 2027 19:29:15 GMT\r\ndate: Sun, 17 May 2026 19:29:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":21459,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"ca051985baa53ec085ebd9096d8fa52b","sha1":"0d227a057674cd49f399305704e6255013253725","sha256":"6d1b8f21bad25678c322a949ab887efe69bbec0181b323a0c2c6e9656e5137de","sha512":"55017b6de24d72b94b86b6b8e32afe8088b2941b6fde446d384dd755cb030a78df916a26d0265245c58f6d7a870b4dd0bb1d414c2d9c31cb610a42f122a8a3f6","ssdeep":"384:5O9SGx6PSW5gcJkswSEQR3eEyHVqqcyOtlcLDhlQCaG5ENcecci5EqYHM+p:5iSGvW5gmDdt8qVyOncLDhlQNcecD5b4","tlshash":"1aa2f9ed3192b03443578864406f552bf26daca0b88d4c40a166f1e1bdf8efd9773ba9","first_seen":"2026-05-05T09:53:37.889339Z","last_seen":"2026-05-20T20:44:30.401041Z","times_seen":1530,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}