{"report_id":"a78e048a-2d0b-4b96-9425-e287f02c9ce5","version":0,"status":"done","tags":[],"date":"2026-09-18T04:39:25Z","url":{"schema":"http","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"title":"Vagon Club: Online Crypto Casino, Sports Betting \u0026 Prediction Markets","dom":{"size":240435,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45262)","md5":"07c830dde4fcd6ecec55a8732da368ed","sha1":"56274940e988ccf89264d4438619650da4b941ce","sha256":"ef572e252582792557dbc12db583aa62aa5eaca17e6f6f568c5dc0644a7f2e40","sha512":"22382190534c8770abc7d9bd666f38994bae64805b031a1b4d3071eae1c2935d757e6881f0db3853d68ab28ffe864aec114f193a644e6f4c41666b22b23112d5","ssdeep":"1536:8pQvLebx/c64Jysq7vaeh2hO5CLV5GnoNBuRimiQmsp741I2HehHeeHeNHePHe80:TeMUivQmsp741fKFqk1EXsI+yAECOEUl","tlshash":"a5341b741202057d602747d0f990f39fa2abd245ea97c90db3ec82d71bc6c94deb96d8","dom_hash":"domhash7b6dd579296d79655d407f83e9d865c0","first_seen":"2026-09-18T04:39:46.028464Z","last_seen":"2026-09-18T04:39:46.028464Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T04:39:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"vagon.club","ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-09-18T04:30:48.537093Z","last_seen":"2026-09-18T04:30:48.537093Z","alert_count":0,"request_count":15,"received_data":2120475,"sent_data":8620,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"op-api.gambl.bet","ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T22:56:41.726368Z","last_seen":"2026-09-18T04:26:19.369506Z","alert_count":0,"request_count":3,"received_data":3626,"sent_data":1697,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mycasinoapi.biz","ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-10T22:57:00.871632Z","last_seen":"2026-09-18T04:26:19.396085Z","alert_count":0,"request_count":43,"received_data":3047323,"sent_data":23700,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vagon.club/assets/icons-GFHLn4ny.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca967d2dd597e3d5727784009cb1054","sha1":"f3ea5c6bd761c83e0f41c17ad6ef02cbcc87a251","sha256":"8277498b4bac55d6719daab91090d716ae959e7b0681ac2fe3740b1ce7679174","sha512":"f8844ffe14821a1f78697ce100b83f54cf9601fe3a158b75c13312d66edf05d2a9550380f782e188f746ff21af834d98958553548f69ea1767a5db9d83a403d9","ssdeep":"384:HmuQoAlifjrD+M+5ePmAqzJ8gKavOwZNMSn/XQ6afdLOxIMyAwmVo9W9qVGcH66n:HVAlifjP+M+5enqzJ8gKavOwZNLn/XQR","tlshash":"7692b76f8f88169e4802e68d1f67b0111fed53bc369a8892f64f9536eb52443dca3f41","size":21111,"data":"","first_seen":"2026-09-18T04:26:23.225937Z","last_seen":"2026-09-18T04:39:46.037966Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-i18n-uHMRTU-B.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220575d9f465bdfbb7f82bda604330f0","sha1":"849644fdbdb312c4c0af8fc5d5c196175c4f8ee5","sha256":"7f9f4e1f26a795cd512ed330bb3dfe5e8fb0c0db46dedd4bcef52806b31ac7f0","sha512":"05715ccd0a0ebf3a0dcc2eba59b86bbcb0bfeb59aa63431c1ec9ac08a47211587c186d6a531b7982e1c606c65bef1d60e083d6fd43992f7ead2349da7e6f9d43","ssdeep":"1536:tbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:1JV4OcZzN42qM89","tlshash":"005319c971faa62643da40d530711408b739ad583448644dfe7dafd6e8d3a0a92fbb34","size":65350,"data":"","first_seen":"2026-09-18T04:26:23.261272Z","last_seen":"2026-10-05T18:49:05.427678Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/country-catalog-C1fbRvH_.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e180855c561c4200851aec17f6f5e54","sha1":"fd28ef2379755feb90da105219a314d279c42432","sha256":"d641a63700629b76e81ae830ee4d7f9a667e27e484a0e87aeccf68749e8839d4","sha512":"80ce4eaa6e5e247d1c4965e68857aefc254f96b2f3e5cb6da3bd71eb3a80da5d50e6e7a28b9ac9737349b66a9248241df08fbd25662056025a1ef14c86387c13","ssdeep":"768:KGg4iTHQZr1GQUiYMfZqKwOm5LErHRL8YgtNNrsrc993pI6i5n1ZXquMvwV1AzHH:TO0aYgFrsw99K6fdwcvuEWv8qJaJl","tlshash":"f273b6faa0b9272e5f3b3971b09f8b955b9c1a01b485cf8664dc0f364e21da021b5d3c","size":79559,"data":"","first_seen":"2026-09-18T04:26:23.19113Z","last_seen":"2026-09-18T04:39:46.061886Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/index-CVwvSGG9.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03de5c76bc984df8b89cb6161761b1f9","sha1":"57a7d6d980392239c5838ef04975c0376832973e","sha256":"24a5f4b374ed3783bb86aa6610e330a8f26c940056b7350021044d63c3c61cb5","sha512":"a6b8edb994348bc7d979498e80ea25f3df04b1361ab3470185f2ee9f11d39f078910a8a743e745788e6761daba8abcd77eaa5757d60c1efc2d83f166a4a37c10","ssdeep":"24576:Y5wHfHYMKM0visuagpGRLTJ7tR/og3kFIvTBBMe:Y5wHfHLKM0visuJpGRLTJ7tR/og3kFIZ","tlshash":"1c156b84b181b9fda7770bd564af9029b13e2f24f91ec480f2bc58253a69041b667fdc","size":919921,"data":"","first_seen":"2026-09-18T04:26:23.201868Z","last_seen":"2026-09-18T04:39:46.069174Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-10-13T10:42:25.628376Z","times_seen":467188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/TicketBalancePill-C7eK8DN4.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d736964c744d864bd638a537fc6a327c","sha1":"231a93e7e8a21f18da35f9e79818af845f76d3f8","sha256":"244eec454e5bdbb512e73b8a1bff152b86455276c00229cc7fe7334510b7968b","sha512":"333d1012d00c468270cf872b98ae2ef4ce55cfaacdc728884cb93acedccfa87e4987ecc9b39ba7fee7607638619f7e7395a737cbc026c917e27a758131c185ee","ssdeep":"384:UJzY5qUIvXl6qa5ITYIA33gq6lJKxZmMIQ1SqjyttADuWh:UVYMFPl38ITYIAHg3lJKWMIQ1SHtiDp","tlshash":"79829644f182abfdf93b5fe0b41d6418701c1f64eb1adec4d1b9e8201a68199b997bcc","size":18128,"data":"","first_seen":"2026-09-18T04:26:23.28496Z","last_seen":"2026-09-18T04:39:46.107692Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/BetHistoryTab-Bhi6CD_h.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2ba2b39b2e8e52956788b28d89def6","sha1":"3ea2c23e223187fed28a1e3d13f37b41da840b2e","sha256":"061d6c7e7a85690900d1cf819f95ee04aa6d4e6c2a1390ed2dfc059246e4f176","sha512":"8b4cdad7fb530e6de8af0a16f90dc91d802ab910eb8518b7821d4705a3c2ab8093cfaabdd5affe3d491f38c28227036235b34b4a0d3f9f0e6bf9ec20a820817b","ssdeep":"768:VU84gc9/g+akfSoOT+pDxqQKkb/U+mDPwJHyir9CKILHDxqpgSg:VC/g+/Tq6bsraHrwKILlqpgSg","tlshash":"c223c740b042bbfdbf3b2dd0f92de00c711d5f98d92f9994a0be68211aad0557a567cc","size":45626,"data":"","first_seen":"2026-09-18T04:26:23.290771Z","last_seen":"2026-09-18T04:39:46.108403Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fb16286dcbd444a866573017125e001","sha1":"90d0256d8d59ce786cabf3834b7418c8d4953961","sha256":"5aa2548b526d4036503af6bc1316037dcfed28206e2ab9ac3728d0a15bc00046","sha512":"b0871bbb37283222e1a8dcf1f59271b7e34d398a4a974213c1988086c1d750fac1f9c87438b3577295304573ea8e6e880537fa3c6b0462c32f81779bb246d7dc","ssdeep":"","tlshash":"17215b44ebf569e5013370380a0f2404e6209467052dbeb07f9cd9a16f9452d87eeb55","size":1132,"data":"","first_seen":"2026-08-03T05:12:55.574985Z","last_seen":"2026-10-13T05:49:27.850578Z","times_seen":1681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-react-BggoXGQP.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b863726bd3dc5e2dbf155e56cedecc0","sha1":"037c8efd902070937775ed233dae947768b8ed1f","sha256":"61724c54eba9beec4961bf4e1059427a47fc260652f43efb348232fbf8e1f8b5","sha512":"c3a9b9c97c3d6e2bbc40addaeab466242c49cb09ca06de6b30884e6053caff4ae1fed22924cff5d0784f35f95ff7ef0810f33dc1f1a94dd08143b6bc69f0c8a7","ssdeep":"3072:zuHaZ+QRjAcwFp7JHTZmSjttXnHUZfmOmzMRMwLfcc0S6IUinO529oaLNtET:zuH8+G801ZOOmKv09d892","tlshash":"d7543ce831adb5265fb312f540af010772782c37185d8860b154eeae36b584961bbffd","size":285095,"data":"","first_seen":"2026-09-18T04:26:23.218482Z","last_seen":"2026-10-05T18:49:05.435041Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/en-wHC-uAN6.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ba7c5a110181c74804781155ea369d0","sha1":"413db40eb0542f4bf39ee5135c4e77619678e3f6","sha256":"5ff607b5bcfd6bda50e6f47ba87a7bba0a560f7004357d7650f21f82c870dd75","sha512":"8125ca427b857eda8c2e443eacf0372f6672e69b7fd246a66fbb9dc75a1c20f057cc48c0002f8374af0a7afa86919c93d881a5b060cd7932ce78547b1695c2b0","ssdeep":"3072:oy01C7JW0A9+r6WEl72GngKhnA8VcM6KvUiuuwW:Kz9+rO72TKhA8VcMXvUiKW","tlshash":"fcd33a0b871526bd0aa313643ace3ad577784a25d1e2c455ccdd822c13b796ee13fbe8","size":138853,"data":"","first_seen":"2026-09-18T04:26:23.250704Z","last_seen":"2026-09-18T04:39:46.077899Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/kit-C4Umz-46.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"57d24ba2c0340398383b341fa9ef0a24","sha1":"3ae8f7406e64f7e2f9e424e570b94c75fb0d169d","sha256":"4c88540cc772b972e61e656ab34bca146bb2ffe9b8070e069096fd536241f5f0","sha512":"46c0b64a6ede41f998f8153d0a893212281229a6a56c5d6184aa6cec1146b284f43a09d28036b5a9dc85f0a9dc4e7beb99bef915aa4148408b2d8b0be75475cb","ssdeep":"1536:ZOy0tNo455wjcQLgm2r8RDkGeP3BkTQMR453KTA3RDesHabWNsr0ggyvx90hFvS0:ZOy03o4PwjDWkUMWMAcqQ07yJyhAv8","tlshash":"0cf3c8f73640a72775b13b188e0ae28f6f9c9c52ccd8a44caae7cccb995186170bd715","size":169331,"data":"","first_seen":"2026-09-18T04:26:23.273571Z","last_seen":"2026-10-07T02:50:19.250522Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/AboutUsPage-f7j0b71K.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e030cc56143320f47d0496e363d67ab1","sha1":"41fe1cdb74c367b39e2be8c030c19dc959048469","sha256":"86a74ad3c5918e3fea31d4e95401f8f1956c316d99f961020432ee6e36d6a6f1","sha512":"2f5642cd1ee214feb19da7d1d4ce7b9107643336a17ed4fae79a3115924596c5c65256e1721d549b381522b88e7f01c0ff9106c8ba9a35c09cabb08c4e2cb119","ssdeep":"768:mPL/YynKQAHRTsX8/WhcU0m0VLf4Ftx/e5a+cuHB:mbiOMVmxGR","tlshash":"68e2a77ca000aeedf93bcd52791db008b02a2b69df3a8d44fafe7011d9a545139d67d8","size":31274,"data":"","first_seen":"2026-09-18T04:26:23.283392Z","last_seen":"2026-09-18T04:39:46.110853Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/ChallengeDetailsPage-BqC0TjNr.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75c5d1c77323aca5b4ea270d0be694e","sha1":"86dff24ab23a5fbd13fd8393573c7ac096020aa6","sha256":"58e28cb49a639dbb8f1e942021e2f451e3f147fc989f654c163e95dd4c3243d0","sha512":"cd43d6b687b768685105030186f6e5d875277dc9ee12f61812f26dad9a1dd258b3941f5f7dde8adeedf3fe7d79a0b4ea187083f0ee6fe947a9604eed805f1fa2","ssdeep":"768:zPFuN0dEbgSdTZKe+hq2hb9yKj7iB2VHbBBLhNiBPP9yOwQ6701TuHAzE:EaaYOK7nX","tlshash":"e4e2e86c9042bafee93b8dd2742e745970352728ee3ead81f4be70216d9800535d6bdc","size":34178,"data":"","first_seen":"2026-09-18T04:26:23.270413Z","last_seen":"2026-09-18T04:39:46.111652Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/WheelsPage-Devdj2zj.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fb163c7f6e9e853f600da1c2fd1d7e1","sha1":"059db17350d2ab203ab18bfd2f03c13169a0c6f3","sha256":"7802e2fcddfd83a255ce5a4e4de17245225e17db11d2f34981de920f6eacbb23","sha512":"de520710f309fd74217a6cf750edd5d75f72ab51bab8bf2c82c4a59260af4e1ab9c413a86970d3479c4816334f80a1b79f7ccd9b75b8b186a4fe938a5b9f0ec5","ssdeep":"768:ZpydcqADRibviF2TES67WRKFKvhfoCbztmSZlHiDhlC46l:ZpgqzSmWRPhfoCbztmSriq4e","tlshash":"7fe2c704a102fbbef9372de0fa2e9409701e5f58d22f8954d1be28112aad0d97757bdc","size":32658,"data":"","first_seen":"2026-09-18T04:26:23.282085Z","last_seen":"2026-09-18T04:39:46.114118Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-query-D2GKGktG.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52becf48047a6525a3efe0a08e2f1d96","sha1":"5a2b2c2e91ef33e5038fb426fbaf032ffddcb415","sha256":"5ba0377ec0d40321f3cf6be6323b13ce1220e0f0d6d11e3668acefec46b2027f","sha512":"e164f8278e5b57d71b58e19fe80955553e57ef21d8688f53c34fcc07b252df43448d24e605c9cd31335ebb879e7327c24c4ae12b9fb48d0bfecde4323b930010","ssdeep":"768:sfrxg3hap4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18q:eWU2MFoOE48Xzt9Sy8V","tlshash":"f503b8d67142e2273ad18191dc3e4125e2356914340ac06cbabcade7b963ccff5bea35","size":40820,"data":"","first_seen":"2026-09-18T04:26:23.189771Z","last_seen":"2026-10-05T18:49:05.441653Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/SupportChatPreviewBubble-HSCm93Sh.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163e97b102ba3f9375cb150f56eb64e1","sha1":"46e4a18a63fabd239f53e7a8e27940373074df7a","sha256":"053d15400992299ada5233c0c7e088475b1602d0d378ee1b243988a35dae442b","sha512":"f61c678c65502e7e3a43accc963b79a30ecb670f9af043fe299b71dbe4faa5ea5202d813735a2c015ba916814e91cb800707318868244613f02ca6d13494a0f7","ssdeep":"1536:AjCQeZMS5TKs+jG1ZHhecTYl3Frze2c7XFLO4mSYNDMz9HC:AtbSFKs2iAcyJe22YYC","tlshash":"1cc3d7dc788178a9639b44a590ff500bf27d6d4b700c84b0f1689dab79728696263ffc","size":124755,"data":"","first_seen":"2026-09-18T04:26:23.289014Z","last_seen":"2026-09-18T04:39:46.116277Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/GamesPage-CHWONtI4.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3811973c9cd9a78e8584124cb3d0fad","sha1":"c0c947adda4037f493e2c2e4b7c17c8d6de3814a","sha256":"d635a8fe096111fb04de53efc42aa6796521030d6f9a90059610902e73591949","sha512":"2909cc1761aa7a76cdb10825431ae3c2837f2b0a7353d54450ae4e10ec4cbf005a17041ee55a00bc1ff8a9aeddb756d12feb4931aa57c23eeb2c4c2c4db63000","ssdeep":"768:Ygz5oKj+qZkyUWKPHMuyo6V+CUZt7VdrqLMVbZaqglUEXbR1nTG+7T+LGXw0KbV9:RxbUPKqVEHQPX","tlshash":"68e2d944f191fbede97b0ee0fe6ee01470190f68eb2e4894e1be281119641ad79277c9","size":31287,"data":"","first_seen":"2026-09-18T04:26:23.268734Z","last_seen":"2026-09-18T04:39:46.116976Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/ProvablyFairPage-D60eHsMc.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00b327528a248553623a86c021e119c7","sha1":"28db4f3423b93d649279a249305e7104f29b5dd4","sha256":"4cb55076d85f10ebc27fb4bd9a6fbe9d67b03676ded3ee5dd6076abc908611b9","sha512":"49e66dd1d1d9aaefe368c7074fcd372f9e32d5f82eb122ccf3d29ecb59d598ab50d5c34ec531bab27bd8907bde95fd0c1a9235e1aa18322eab40b23fce0ac1c3","ssdeep":"384:UVwI29kXKBkmVFfqUr5uAANHz/At/DKi+Y27ZslZD1:dI2mXQkmVFfJrfANHz/At/DQ7ZeZD1","tlshash":"b742e861d081fffe29271ee4b92de19cb00e1f6cda2ac590a0b41c051f6d066ba037dc","size":13029,"data":"","first_seen":"2026-09-18T04:26:23.272221Z","last_seen":"2026-09-18T04:39:46.117631Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/useGeoCountry-CNYSgs8F.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5907d35419753354864cdd2cfd3b3700","sha1":"fb353842e97211483e22c50b159ca1f7ea07dbf3","sha256":"537035d257f0e5233e01df1a5c6bf29716162552eb96de51a462d5daaaac6a09","sha512":"9989d262d62219a0310996af496842a0aff18bf9d8fd906916a1f119b3935a60d97b2bd5f2b588e8e578ae77b7ca510f14f0e1159e72c37a1d936b5ccd76047e","ssdeep":"384:Lc/LN/4D3EwCEflJ0zfjMaAJWECyeKxh2hZ88yBwvQPrbMxXJUpSMxo40gmqZcrW:LEKIyflCzbMa2UKGhD+wIz4XJUEMn0W","tlshash":"f8b22a44e105befef9374ec47c5ee018710d5f18da6e8ca1e1bdb8215aa889675a33cc","size":24630,"data":"","first_seen":"2026-09-18T04:26:23.286591Z","last_seen":"2026-09-18T04:39:46.118278Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/VipBonusesPage-COEHipD7.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f37ee019d943b482ac088954eaf933","sha1":"66b0941dc01c70df43822d0b4d1b4565808cd7d3","sha256":"e6176c155e4fe5afd218ba8eedf6bff0572f6a8802ee736bbd32f5301092e56f","sha512":"82af0b8ce0b41e0f428da9e32f879730a9ff01eb93ac818f55a0f47048dc1493b5646aac02d75e46a84c37e0e25349d188e673621bc0373efd6f7de0f9bd9c94","ssdeep":"768:6lqaWBZ59oRZbaEvO1CsneITl/uwTNtn+aVKZ7nKfjU0c0uU5eVX/2zz12M2pLyC:6lOBZ59oTaEvcneIlNn+aVKZ7nKfjU0s","tlshash":"6ff2ea446140f7fdb9371fa0f91de548702f6f7ce92bc8a0a1bc58141b981907a9a7dd","size":35548,"data":"","first_seen":"2026-09-18T04:26:23.280604Z","last_seen":"2026-09-18T04:39:46.118909Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/SupportPage-BpYLRYaH.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"968e75d6d00618fdd8eaec719b23e059","sha1":"3d598328acc593f07615374940ef123043d33405","sha256":"34d05310ebbeb4701204def88fbdc8379a8f17f5566401c79713a9d5475b5318","sha512":"1663b6551581ddc4d5ee1c5c8ec5a05c0a0953db3c197f7e26fc1554a61a55dfdc032961ccb7488bb0b7a4106f280be246fb060a78eaff10e64f0647d052fbc3","ssdeep":"384:gfAtVTWW0CpP/wYjT7LdpLpLAAl/MMpHxw:gfAtVTf0COYjT7JpLpLAAlMCxw","tlshash":"de82a540f152afbefb371e98fa2ee00971190f54ca2fca11e0be742555581a1b95a7cc","size":18179,"data":"","first_seen":"2026-09-18T04:26:23.294288Z","last_seen":"2026-09-18T04:39:46.120269Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/SupportChatPanel-BdLZUGY4.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13ad0491a02f0d18f070cfe539a7c9b","sha1":"29b015fae4081151ce027fb84676a01f9f39fd4d","sha256":"0555428dac7a11a11a3b065a669f794fc8430b6db4802a6ba34b406634abd7e1","sha512":"9927e45b7ad91c9a7d9367920d8f8553718cb1a6ee6c3eebc3e986cb817d974031c9d4ae49d99f1ebe09e964752942854fa9aa97b0574586ded6c7ec6d77c461","ssdeep":"192:9sLRUK0ix1N2pWFMLBVnHrIs/sfG71Tue068NnTJr2yBctpJVFNRAJx7wOFD:GyK0ixv2pWMnHrI3e7lueWnTttBctHVm","tlshash":"3c329504a002af7ebb7729d9fe5ed008b0194f98d76e9d11e1be342226890d5bd673cc","size":11613,"data":"","first_seen":"2026-09-18T04:26:23.27511Z","last_seen":"2026-09-18T04:39:46.122563Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/ResponsiblePlayTab-C3u0re5A.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d65df3e3aac187c7d810671ce5e2a34c","sha1":"4b5904e6e9669d8acec123b3beab8f1e4498bf40","sha256":"357b0e866b1916c9727e4a39c95fbab84b3c6ec75eb49f48fcbd089e15ae1d91","sha512":"a8fcacc80230a266c352c847eb79c56b55a771d401c88f53c3063a841baf4fd6e2488025eaa11f1932c8efd5c7101a5be80de5236562b7631824da7eba0337a5","ssdeep":"192:gCGd28M9JqsRLsHci0F2+tDHagysr6vHExyMOJ1riJ63+ldpCJ1N3UxvV:gRdvsd11VHjysmPERi1riA3+lk38V","tlshash":"5372f944a005befebe3b6ee4b56de418301d1f80e61ed494e0beac212a580067977bdd","size":16130,"data":"","first_seen":"2026-09-18T04:26:23.277893Z","last_seen":"2026-09-18T04:39:46.123546Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/AllAwardsPage-c3YKtZs7.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd6004d181ea813914dec6ebfd541ee8","sha1":"2299bac800713a2870310696ec5c776832f4ef24","sha256":"de7994d6db9056fdf958bce5e560ae06aeae5da8d34992c379a8e1fb9c2a557b","sha512":"39244429f86019534a98842d8a5d53b05f8ecfb9253dacf73d8f70a6211d18b4981e46caf796e17cb185263b5d0575163177958c0102b19803cfa0e0a06ffb84","ssdeep":"384:1SJ5teyHtfIdNaVHiFUo5iJCGMZcW5FDqE51TamHmgxmYcgubS9Jz:18nfIF35V3ZcW5d1TamHmXVgubS9Jz","tlshash":"2972d91cd141faade9378fa1795ef049f02a0fa8ee3e8980f1ff701558a115066a97dc","size":16415,"data":"","first_seen":"2026-09-18T04:26:23.276343Z","last_seen":"2026-09-18T04:39:46.124402Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is made possible by our own product, Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://vagon.club/assets/vendor-i18n-uHMRTU-B.js","line_number":1,"column_number":33445}]},"http":[{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/big-wins?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.848Z","timestamp":1789706332848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/big-wins?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"ad4-OmUAGd6aztzQ+VNKRHnV8H8xZv0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nIAIu1vR7bcdVx9PLrEGLRWfxAHSqI%2FFbmD6MdDDEgyXH%2BXJYJqWSgax0usAIlDZU0nTQzYRRnxPQYsqElYzLNc70UVMopyexR%2B0D5%2B%2BANfMkrL0O3SQLp6HtcUoIeHk4U%3D\"}]}\r\ncf-ray: a3cda9e4498fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2772,"size_decoded":2264,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a3a301f37faf4bb632336c811fd4124","sha1":"3a650019de9acedcd0f9534a4479d5f07f3166fd","sha256":"b7f1d9474a453a94be11e6b2e76da32d9a15d1ecaa7b6b0023c298f3a8955066","sha512":"630663ee91d06157b935313fa82b2bf9683421502551d69b384e64534535c1daf2f068a85483063fe2ba2f86cc1bbcad09975621bf67aa4cf648528e9778e528","ssdeep":"","tlshash":"9051a16e94441cbddf795a984486749de4ede2bf95c04c0480aadd3eccf82ea25bc827","first_seen":"2026-09-18T04:39:46.030069Z","last_seen":"2026-09-18T04:39:46.030069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/fonts/proxima-nova-400.woff2","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.783Z","timestamp":1789706331783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /fonts/proxima-nova-400.woff2 HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=revbSQ9sOFaLxRNP; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.228; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9bff-c3e0\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjMMEz0J2Q8obg1lT%2BVAsBPJFvllOWQrkpuoqzm6Wll9PrCrmu0VIZhHGAOKIXvshiGB4GyVFPpuhwZJGWbdw4DPJXiZDK08S3dn3jp0FamLVNdaKw%2F9d5H8QhZK\"}]}\r\ncf-ray: a3cda9ddaaf456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49910\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"revbSQ9sOFaLxRNP","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=revbSQ9sOFaLxRNP; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.228","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.228; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50144,"size_decoded":50986,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50144, version 2.197","md5":"83a692d665bcefcfd06fa29069a70492","sha1":"c993dbd1deaca0176325051dadc14e19091227aa","sha256":"3f16e37be1b41b426978a1eaa6dd9d30050ab36ec5a0a56d56e5156b55ca911e","sha512":"c786e7d1a4e0652d49224a0852d0ec2234b3bc7aa97451c9d3ad45b97f14cc5d60ea3acd92048ca0daa1a54a631286cac305bf9b002af68b2c04069173dddbdb","ssdeep":"768:XG4XuxwpUzmAEzqXkxbPMDUGMVCvyIPUc8ogdIsvK5RmzKFd+Wmk6:24Xn1A5URkKCBZtgdIwK5RmeFdok6","tlshash":"d833f121f0f8de0be801267cb005a7f393fa85790af42f5d2786b15b6c5f6261be4506","first_seen":"2026-07-22T11:06:27.405995Z","last_seen":"2026-10-13T05:49:27.809209Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-query-D2GKGktG.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.792Z","timestamp":1789706331792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/vendor-query-D2GKGktG.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=246GNkQMOIkJgaR7; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.100; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-9f74\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uc6oNjlRxl6l5aB9fhdAsRCpEPpmDeOMkJ2%2F5nuIkgedeDFcRk71rirVbFvs9qaaBh9rBgzrxkZmlXd76pTz0j6OPntMqaknhhyQr5nVzmWwvi7OuHi4zKGQviCs\"}]}\r\ncf-ray: a3cda9ddbaf956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12260\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"246GNkQMOIkJgaR7","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=246GNkQMOIkJgaR7; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.100","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.100; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40820,"size_decoded":13374,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40819)","md5":"52becf48047a6525a3efe0a08e2f1d96","sha1":"5a2b2c2e91ef33e5038fb426fbaf032ffddcb415","sha256":"5ba0377ec0d40321f3cf6be6323b13ce1220e0f0d6d11e3668acefec46b2027f","sha512":"e164f8278e5b57d71b58e19fe80955553e57ef21d8688f53c34fcc07b252df43448d24e605c9cd31335ebb879e7327c24c4ae12b9fb48d0bfecde4323b930010","ssdeep":"768:sfrxg3hap4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18q:eWU2MFoOE48Xzt9Sy8V","tlshash":"f503b8d67142e2273ad18191dc3e4125e2356914340ac06cbabcade7b963ccff5bea35","first_seen":"2026-09-18T04:26:23.189771Z","last_seen":"2026-10-05T18:49:05.441653Z","times_seen":22,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-two-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.255Z","timestamp":1789706333255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-two-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"1e8d7-19e1889e150\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rn0MwroZ2Ya9ucuF7ina8nC%2FgXeg2ISimDi6qVpDsNTkdpAQNoO0%2FLi4q6fdrMkSTRPKhNkXx%2FEBeac3hyoSwLf%2FvKK9wE6PSmvJnbhzYV54RHMr4ZNPD5ocrt%2Bpza9AkVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6da08c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125143,"size_decoded":126599,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2d07f21bc75cb17f3940a7123055df18","sha1":"c3fd481de5f7cc6fc3a4bfbce86e2bbdba460c80","sha256":"9ffc0c533072f341ae2d4e275de1a7a5bf86aa9ff2ae655d29a762af22dc6889","sha512":"28f58e9df9b691e95c7020e505dd5625a186f3841a5ded08138178f438c6cbde536e97c10faeff65caacc8a9e56e1d2794e20664bdeca81e12c2d6e98f4b5817","ssdeep":"3072:jbk1ZeasmvqGo36qLo19b9fxS81h2n1Yg:U1Zea5fdWo71xDzS1N","tlshash":"33c31253a6202d8bc25b83fe551b055cbf7d8de00d29baf78e5ffd618a38ca1e944409","first_seen":"2026-05-03T09:25:58.448805Z","last_seen":"2026-10-13T05:49:27.81521Z","times_seen":1695,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10txbigbass.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.269Z","timestamp":1789706333269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs10txbigbass.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"9fe8-19e87ec0197\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:51 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYm6zGWNlG4HiafOoZnTb8N1dN5Li%2BZ79bfPMV4rhywuddR618scjTA2eSb%2Bhx8lJI3nekK%2FupsCzTR7DVsdFJRH2ZDwZtmb%2BIM387nBSOUjJwL38wOCkojS4a6k8aJumsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6fa11c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40936,"size_decoded":42390,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"46e5c64ee5f47133847efa0e29e91a95","sha1":"4a3f73b71e5e95c4b69f593027effa6285305190","sha256":"10c32076a837fc6ea356eb4d8fbb695e132ddd4a2b458b318e371a953b4c7701","sha512":"61f1fa630014cfb5032ae6a86ce1310a86f018e29368bcbbe0e460f5aeb621548364ddfd2cf74cd4eddd52b253ff85280381664f94d09ad0d54f31b0271282b0","ssdeep":"768:N/GALN5fNwrRiz067G5lYdKToKFMYAHb05jyDz+CWKGFcf0KejN:gALYiz067GvFdAAjyDz+C2B","tlshash":"e503f116339aae31d35b33f2ade05bd57b1a8590ead1a34c1cb30f7019bc48b29b4761","first_seen":"2026-07-10T22:56:48.098937Z","last_seen":"2026-10-13T05:49:27.832776Z","times_seen":1255,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/tower-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.281Z","timestamp":1789706333281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/tower-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"d026-19fb30bc5a0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGKPxyIsMuWJwB2Y05fJX9qgDmJAvPKnYq8SZBL7T%2FJTURUIjyukhhxuc7d64ydsXKZ532Gr9kGNgWl2BYCd%2F1Kv5%2BEYugEbWigBkE%2F71lph2Oy8eCtU8Uz8HcSG7mUmI9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a16c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53286,"size_decoded":54738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b9599e2d9027e6ab05bbfeccb087252","sha1":"01c880f214208347ffafbef11a4e9f0dadd09197","sha256":"f18abaa4b4fd38b64c53aee48caf8195a6d9f39dad982b48d17301a710374894","sha512":"4e895bcdac61c4b06189fba323c4298b02e16029c369402da731516cfcb60336fe9efe032f7e80138f1cdaee0be22d1bc5a4abd0e85317ee4b48cbb5d7f4e75a","ssdeep":"768:2T2ScHf0aT+HBx2sLkijIoCogKWIrNCw5L9RdmDWSrEvOA61aJ4sg4jJeAolCJub:Rv+mOu+gKTswRLdmwaang49ehCJH52wE","tlshash":"7533f1025128fb2ff494f030f4c0521bf175ae98f25b566b63b7612a805c96827b579f","first_seen":"2026-08-03T05:12:55.485514Z","last_seen":"2026-10-13T05:49:27.802697Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/dice-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.289Z","timestamp":1789706333289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/dice-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"e878-19fb30bc1b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRQO6F1eTPzO7LkeanDyrNPNzftzi7EEFEOV11R%2BW%2Fzz0Yz1sryLBmdbBORwg6hAXvIMzX2Tb4InpSxNpshCCYDwr%2F8nuZFGl9FYStmErXcXZmzSE316oehpv2WflNjQgTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a1dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59512,"size_decoded":60962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fff2e15969b5c850409a612cbed1485d","sha1":"e9f5120ccda1f4b7de0b3035b8a952ce12e5ed70","sha256":"b3dd3eebc50039d87993470811865e8923791a5089ca1e3515aa347123b69390","sha512":"198e9f1dcac65b9d5a1e9f967a19ebb6c8d5c6e7409cde4b9fbbb92bd24629c67d48c50e3a3ac88c364534900572fc9fa3bfa94bf0f5b7cb0b013988faa72455","ssdeep":"1536:TrIRyDZBU7ahgw6IeyKWhcyelz307PCCydp:TrIcDZSoLuMcyeREzCCY","tlshash":"7443021723374ff1d69ff0b03b22694fdbe8e2562364c2412ac95ad532c978c4e2ac91","first_seen":"2026-08-03T05:12:55.538796Z","last_seen":"2026-10-13T05:49:27.801588Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/lucky-neko.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.301Z","timestamp":1789706333301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/lucky-neko.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2348c-19e9f372cf0\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008386\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lzvy%2FqSadf43LytNNUZuB98bARrskqmkrC9ps6c4hNhWjcliI4dyedN3k8YQyp4v54bN5vFUzeHSgHt0BBoGAE4oQppSKkFDy%2BlCOeDE1s1jKBNHyJEu1ksWI82oZ1INJlo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e72a24c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 144524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144524,"size_decoded":145974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a66f6a2a45ffeb6365a9888fea9d071","sha1":"9d21d8cebcced6c6d06aacc78b5ce284b40abba5","sha256":"8d6a20e89555c6993d5b364f1a223d2b535dc6dda62a2029e109480e4e50d0a1","sha512":"dfb60fe490e76647ea3e84eb22782ffcbb18f31e164864b848e68f5aebfdbef0290a8b18c1aa28ebdf17b824b9fff27b6b5163bc79d50c8100bc2833c965be75","ssdeep":"3072:x/hzMOC0dko1b7E05ml+65J3Q/TLlQrsFLwHFEPLqgu9:x/hzM1qn1b7E2d65ZQ/T6hHFPp","tlshash":"b2e312eadf784b19488cffb17063d168cdb07f0bdf7a8be66613160ac2285455b5c285","first_seen":"2026-07-10T22:56:48.039027Z","last_seen":"2026-10-10T11:58:41.825459Z","times_seen":429,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/icons-GFHLn4ny.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.794Z","timestamp":1789706331794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/icons-GFHLn4ny.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=FJvOtNsHr4CuWnxY; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.208; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-5277\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XylAgjGVlfhheE1lKVLNXLswOcCB7H8suiWifrY%2FM1QZ%2BflVwtrijn6%2F54bleYKcD%2BFymf6lF3%2F3qdmQ7jdE4YwloUW9HPnssdGf9NXVokzdSZ1dVwT9ifLSfWd\"}]}\r\ncf-ray: a3cda9ddbafa56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7252\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"FJvOtNsHr4CuWnxY","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=FJvOtNsHr4CuWnxY; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.208","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.208; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21111,"size_decoded":8373,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21110)","md5":"fca967d2dd597e3d5727784009cb1054","sha1":"f3ea5c6bd761c83e0f41c17ad6ef02cbcc87a251","sha256":"8277498b4bac55d6719daab91090d716ae959e7b0681ac2fe3740b1ce7679174","sha512":"f8844ffe14821a1f78697ce100b83f54cf9601fe3a158b75c13312d66edf05d2a9550380f782e188f746ff21af834d98958553548f69ea1767a5db9d83a403d9","ssdeep":"384:HmuQoAlifjrD+M+5ePmAqzJ8gKavOwZNMSn/XQ6afdLOxIMyAwmVo9W9qVGcH66n:HVAlifjP+M+5enqzJ8gKavOwZNLn/XQR","tlshash":"7692b76f8f88169e4802e68d1f67b0111fed53bc369a8892f64f9536eb52443dca3f41","first_seen":"2026-09-18T04:26:23.225937Z","last_seen":"2026-09-18T04:39:46.037966Z","times_seen":12,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-race-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.254Z","timestamp":1789706333254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-race-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2fb27-19e1889e02c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnIuaAAZ2rQdRu7z%2BkcYrVVghpCwd9DVRgsY6OidqOYSjHHTaAhYLBE1Pq6PulHANujRW7l3l6S0s72hVXnrMI0FgI88YR3rKlW2JmMh4HIkW4rPXOuVh7jRYCpLWR%2FqlvQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6da07c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195367\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195367,"size_decoded":196817,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"de158b0c510417fba2d86fe9dc29d4cd","sha1":"b023587e15eaa94cac426b0a634e83b3fad3d972","sha256":"dfe048fce2f1b58c4cd56008d522b8ee3b1f0b40b6383d846441621c8d89df6f","sha512":"b035fa249696ca1923e54314cb2a96197d5878f1e11a1cd33a57ddad4694f4d92f3d70f71b21a1749a3c835b3109e5791b6b7269304aec9f12c55d5e6c01c0f0","ssdeep":"3072:NJJRhYFLeQitU00sUQecSwR3+SFYGypmMSXJ/EOYF2/0/+RsEvjO8/e9xLX5kQO0:NzRYiQ8UiUmR3ZFYJpmMSZsOjuUa8/8d","tlshash":"611422119983348d566c0beeed88d0fa00fc654e53e954b059bc9acbd6ac3f117c2e6e","first_seen":"2026-05-03T09:25:58.528271Z","last_seen":"2026-10-13T05:49:27.83735Z","times_seen":1615,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlight.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.271Z","timestamp":1789706333271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20starlight.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"8a02-19e87eca807\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyTtxIN%2BOAppa%2BJqwPkv2VYGbNLFtsyD3IgZ5AT1RGa%2F1%2F8rEFn4jFZCKiTssnusPaCHB1wfitUbKT%2BPg2qNdUPi0nM3JOyPmpgQAHzKbZEIHYxOR6iQOj8DhI1TNFohs%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6fa12c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35330,"size_decoded":36786,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb70ba24f84087137f07fd3cf86867e2","sha1":"6386b0c6ba2cb19855f820832bd93519e0681bd0","sha256":"779f8d03af2585cdd3584a77c86785ffbe20b691ee740d604aa92bf33abc2c89","sha512":"22cf4a6685a034663d99dc36632d8b1013cebcaa19ea5f6cfa3ff3a3b4851bf3ef6bea86a8768af559b15fcf6456cb630f39258d5042639ccd814affd0d6d0f0","ssdeep":"768:YW2SZkHXcFP2HKuzbO3poGubgpsP08oOFSGIw2rMO/7F/fceme:LZiXcFeJY1u8AoNGIw21DF/f7","tlshash":"51f2f1d48b4ca3d1ac94212e5e1f943232cbd78646ae4e90412b63907f2cb67673b9c7","first_seen":"2026-07-10T22:56:48.046937Z","last_seen":"2026-10-13T05:49:27.820733Z","times_seen":1247,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mahjong-ways-2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.302Z","timestamp":1789706333302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mahjong-ways-2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2a608-19e9f3725e0\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:12 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 3497782\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxZaCEfNqHaddykeLchWtSa2QoMR7ZABVMQPXp3BGqcyiV7zCBzIEcEvW7F%2FSDKgsU1GazUfMdS%2FUUCorKu5PsLNdabB%2FrAn5WXCnx%2B2lk%2Bj5VNb6oiCnSO7zJZ05NOJZAk%3D\"}]}\r\ncf-ray: a3cda9e72a25c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 173576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173576,"size_decoded":175032,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58bba5a9c8f6e2c34e457f32f7c3bf0f","sha1":"e55b696f9956a455aade4d6d96bd547ff3630929","sha256":"c4ebb6c8b37d3f9ef0a4c78cdb871c82171ddb2af3968bdc313406e304c60623","sha512":"e88194b29c1932bc2cbe0b1add06aab8a5c963ed43a7b354210a3d53fc0988cb0ee274569bab539b59e9dc23f606438f13657dc22deea9750eb84e0f07d78509","ssdeep":"3072:Ik/jRmseNPPic603se1bvbmpAo88BWlhgOF9O0FqYIQO/17HrtHlYrn/zbaK+Mds:IEjRf5Ss47fiBW/UMMjHrtHC/PQMdGFJ","tlshash":"ff0422142676ca634445957b62d65370fe8c27c98b292c9b3daf8b300a436324f5edef","first_seen":"2026-07-10T22:56:48.032702Z","last_seen":"2026-10-10T11:50:43.061006Z","times_seen":417,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.262Z","timestamp":1789706333262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20olympx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"7606-19e87ec8ba7\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:26 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ToWNaB5fbgrmyJKawUGKhzIPofQLSUC%2BEJamv25kFoxnm0yK%2BJOZ9AzOux%2B%2BBQX2iuNDSrh%2FgRz%2F5Jdd3q3iDugvibVLXYxwf7uCspEaXdYDXu1Ug23t36L3xTIvNrw3YY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ea0cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30214,"size_decoded":31670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9514f4cf62ac519e1be2aa9c0c76aa36","sha1":"6e303bdd882e0a4b82139db82429a5282f6e303c","sha256":"d3ff28472bdabcf09e6429242c9320e819e993cbe0119c667e11a834235ae783","sha512":"65afd430152c1f5e3aa462ffff635e36653111d1d61b0c22d5675dd7eaab99583ad3392a2b7ad63daae10f448ede601aabb7603e041c61fd1c2e459fedc4627b","ssdeep":"768:PYAFoDRfzqaU0msv6kboS2FA+2DMAsKR5FucxI0c/liV:DFq+aYsSQoSH+2D5qcaj/","tlshash":"47d2f1c1a9326d244f05ee992bab0939d8c03e25b5452ccde23bcec6735d6f6837125e","first_seen":"2026-07-10T22:57:05.857918Z","last_seen":"2026-10-13T05:49:27.819212Z","times_seen":1074,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-ox.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.292Z","timestamp":1789706333292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/fortune-ox.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2a8d2-19e9f374a77\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:21 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008386\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0xFIG9bPOw0Pd2g09nJlgB6WsNOSrPLh1ndHbnXrzCRFlKcHR2OxvLBFNPMmTCfmkIIvj11MQWygNklU2G7VXZ8Y1gOZe3xN0ydKeJhchWGOHoGmXVD7N6sqZyrQJSS9E0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a1fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174290,"size_decoded":175736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c66095f87278d84f1edfaff10b5b01d","sha1":"65ccef4cf03bbb81bcb642233a82bd0fff10eac9","sha256":"255aba0714080a1932810d280b72faacd3e411ae9acf4c61cdb1ab7116ebeb71","sha512":"fe17aa13520a0c32a3d60e4c5f88aca93609306be1aee3c1a4c18baf91feeb2400ee9eaa451acb3062315f449fdca5e304873b1bdc40bdc525dafd8523bf6a60","ssdeep":"3072:nkT3mJ6MzKeHOrEVQVVrPBL/10V7BiHH+46JrphRFju9Ne1Av:nHJzW0NQVvLd0V7BQ+vrphRFju9NDv","tlshash":"b10413bdb6cf7d8cdb4050c795b8c26000dac826bf2acc7d12014f593250a9a29eca7b","first_seen":"2026-07-10T22:56:48.031614Z","last_seen":"2026-10-10T11:56:07.267375Z","times_seen":436,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-react-BggoXGQP.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.789Z","timestamp":1789706331789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/vendor-react-BggoXGQP.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=CAz4v24mKbjqHC2A; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=172.64.209.2; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-459a7\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptwgzv71oeNQ7WRi5DAwdpafN3Oos5VrluM%2BJ88fq%2BTqD%2Brkd7GMwrjh%2B85%2BDc8aD2Qhj6%2BvE83YRLSXGGs%2F16UKtDiIR3Bhz95Ck%2BbKsRu9HW%2FN6hYy%2Bce81xuB\"}]}\r\ncf-ray: a3cda9ddaaf856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89942\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"CAz4v24mKbjqHC2A","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=CAz4v24mKbjqHC2A; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"172.64.209.2","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.2; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285095,"size_decoded":91072,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42921)","md5":"5b863726bd3dc5e2dbf155e56cedecc0","sha1":"037c8efd902070937775ed233dae947768b8ed1f","sha256":"61724c54eba9beec4961bf4e1059427a47fc260652f43efb348232fbf8e1f8b5","sha512":"c3a9b9c97c3d6e2bbc40addaeab466242c49cb09ca06de6b30884e6053caff4ae1fed22924cff5d0784f35f95ff7ef0810f33dc1f1a94dd08143b6bc69f0c8a7","ssdeep":"3072:zuHaZ+QRjAcwFp7JHTZmSjttXnHUZfmOmzMRMwLfcc0S6IUinO529oaLNtET:zuH8+G801ZOOmKv09d892","tlshash":"d7543ce831adb5265fb312f540af010772782c37185d8860b154eeae36b584961bbffd","first_seen":"2026-09-18T04:26:23.218482Z","last_seen":"2026-10-05T18:49:05.435041Z","times_seen":22,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/vendor-i18n-uHMRTU-B.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.795Z","timestamp":1789706331795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/vendor-i18n-uHMRTU-B.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=KGpCEHIdXsDYYlKk; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.197; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-ff46\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auyuwiFsFfdRrqTt6UWuuh5yinzJYELrWUOhveAd5lW8Ac5LhHEJWYk%2Fq6OcBV8KeSN9qmTrilOmJ4XDS1c%2FZ8Lsn2ias9drLw1flAYqtGodYryOgiwbiSW8qPlN\"}]}\r\ncf-ray: a3cda9ddbafb56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22762\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"KGpCEHIdXsDYYlKk","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=KGpCEHIdXsDYYlKk; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.197","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.197; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65350,"size_decoded":23878,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65333)","md5":"220575d9f465bdfbb7f82bda604330f0","sha1":"849644fdbdb312c4c0af8fc5d5c196175c4f8ee5","sha256":"7f9f4e1f26a795cd512ed330bb3dfe5e8fb0c0db46dedd4bcef52806b31ac7f0","sha512":"05715ccd0a0ebf3a0dcc2eba59b86bbcb0bfeb59aa63431c1ec9ac08a47211587c186d6a531b7982e1c606c65bef1d60e083d6fd43992f7ead2349da7e6f9d43","ssdeep":"1536:tbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:1JV4OcZzN42qM89","tlshash":"005319c971faa62643da40d530711408b739ad583448644dfe7dafd6e8d3a0a92fbb34","first_seen":"2026-09-18T04:26:23.261272Z","last_seen":"2026-10-05T18:49:05.427678Z","times_seen":22,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-new-year-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.221Z","timestamp":1789706333221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-new-year-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"1730e-19e1889dfa0\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sB9eVH2to%2FtfrB%2BZrfLZAJqYYiQLEtyVecBRtncdj7cFi9mtnYaFed8hYPM3Xb%2BNKPoLRGP9Ql1nVutHCvxSIqKre4V8XZX5c7cfsus6HxLqxW8g%2BZ3FgE7n1I0pdgvm%2FCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6a9f7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94990,"size_decoded":96445,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63fdbefceb85fa12b3fbe163536ba21","sha1":"1aa6d1ce85bed8959bce57748684be24725ddfd5","sha256":"372724c2ec10fcfc1068d6b19eb189f5f55a977ea9d7c559342e40282cf1d71e","sha512":"3a710b036de4629febd15903a03c98ca13002a4368cfa5246f7bd983b6269acfe02f20408d6eca115b29027ee60175dad8d0f78ced875fbeebaccb1addd5d528","ssdeep":"1536:VdFXCx/pEG1NBLws9R9tuQcpEkCTnWZf1Qs3D+y6yRCPXB9jCbNmDOmTCSedWViU:dXGqGNLws9P4QcpdCLWZNh3DP6bB9jg4","tlshash":"95931255ef9d5db1ef56df39a494213ffaf3247a8f980149904ca9d0a0018ef304d6ba","first_seen":"2026-07-08T18:54:53.805092Z","last_seen":"2026-10-13T05:49:27.814562Z","times_seen":1606,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitswx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.262Z","timestamp":1789706333262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitswx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"54ba-19e87ec55b3\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPR4CemNX1s0aqXqpPPsNIbYLRfH1XfVxxl6B9yZmtKinDDx3mldoU74HXyLffC6X3hA%2BpgA4IJK%2BSnc1%2FpmqC%2FwjU5XQwXeWXodTgap%2Fytx%2F0wg%2FCzSK6zY69cVB%2FZFw6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ea0bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21690,"size_decoded":23150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"607b78c15a6cb099ed5685a069eec4ff","sha1":"f2222fcbbeaa10682090cb1fc0606363dbe31d8b","sha256":"c29893458d23db118fa0bf71b74e5a3ccaa48c3374776c8767be4c521b998ae4","sha512":"794fa2d28461ec95badd7a15e54e24d06c6b29529840fac24217765229f4b46bdfc24ee0b1d5b7fc9502e851ddb0a62e8905da94f922158c58335160f0b71c27","ssdeep":"384:pN9jHe138IK4vu0zR/U/nWxkr9UyTqh2taocYjlOxvDyvaI1Wuaz1hoLiNsTymxR:pDHscv0zR8Pk0K2ta7Dylk0+0x4C/","tlshash":"eda2e03f367c89877cc47f265275d9820004b082dc275a61366776e63fac5eb23ace82","first_seen":"2026-07-10T22:57:09.653891Z","last_seen":"2026-10-13T05:17:51.196704Z","times_seen":1123,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrushx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.277Z","timestamp":1789706333277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrushx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"afe4-19e87ecb1fb\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwcnx%2BcyHXcqNy9f9s8dSbAxgKfqYifMlEL5uJZ8qI5l%2Fc2rFQdGcMy6Dd%2Bq3zYoqNhkRZmFGXs4TeOEtoi4ZELe9omdA0EIke1e%2BdWZm3fsXp%2FZzV%2BijJ%2BB6sL37oJhIsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6fa14c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45028,"size_decoded":46486,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"04c6e2e5658175c43f043f5e2aa4ce6d","sha1":"c716c4f69456a416e9fb9fa2b99c579406a3ef26","sha256":"b1c7fba1d51a4a671922c91c30f4f736dd308ade68763a4208c1991d7e3f6e51","sha512":"92288f847ac811b6c3849af2bbecb3a8ea7439009ef2de0ed19fba56e342e4edd3b1bbdfc741b58aaef902b0ab95e4bfec33da20583f757fa30e293c082050d5","ssdeep":"768:hYyEJAw1+GfedYyGWNsETkDfidgcPyA+DNGZlRjAaS0Mg1UNVNF7iJNSgdU/IRwc:hDceBN+D6acPyAAYTjAatfUNzhiJV+/w","tlshash":"301302a07fdbe0f8d6b5a9348a2f662e7682c58e673657d2d045c41f805924c2ebd03f","first_seen":"2026-02-19T09:04:29.911595Z","last_seen":"2026-10-13T05:49:27.842425Z","times_seen":1095,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/country-catalog-C1fbRvH_.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.796Z","timestamp":1789706331796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/country-catalog-C1fbRvH_.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=iPTItdfXnh9xC8YQ; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.94; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-136c7\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwxvSJDNYZRT3haBNi90ioRPWT7D2W5T0WtoeFYM0MdvanSZkd6xyuEgctScFHosA7GOJmclb3fntpxVvlyZd8kib%2BeO%2FgAu3fJhJTL6lrYnuZEZsOjRu%2BvWzvG%2B\"}]}\r\ncf-ray: a3cda9ddbafc56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23287\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"iPTItdfXnh9xC8YQ","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=iPTItdfXnh9xC8YQ; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.94","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.94; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79559,"size_decoded":24407,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64808), with no line terminators","md5":"6e180855c561c4200851aec17f6f5e54","sha1":"fd28ef2379755feb90da105219a314d279c42432","sha256":"d641a63700629b76e81ae830ee4d7f9a667e27e484a0e87aeccf68749e8839d4","sha512":"80ce4eaa6e5e247d1c4965e68857aefc254f96b2f3e5cb6da3bd71eb3a80da5d50e6e7a28b9ac9737349b66a9248241df08fbd25662056025a1ef14c86387c13","ssdeep":"768:KGg4iTHQZr1GQUiYMfZqKwOm5LErHRL8YgtNNrsrc993pI6i5n1ZXquMvwV1AzHH:TO0aYgFrsw99K6fdwcvuEWv8qJaJl","tlshash":"f273b6faa0b9272e5f3b3971b09f8b955b9c1a01b485cf8664dc0f364e21da021b5d3c","first_seen":"2026-09-18T04:26:23.19113Z","last_seen":"2026-09-18T04:39:46.061886Z","times_seen":12,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=vagon.club","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.363Z","timestamp":1789706332363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/domain-info?domain=vagon.club HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"235-vmGFzx4UuG4jo9wqL9FIv8Q5Tpg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKRYDHoqevwXTmLw8YXBBbUJqaj1Evv6bb93UvmPbtddUmtiSWPxi%2B62f2K2GsByWs4ga35brR9y0ZjjTCVok4hVRkUyo4%2BcoKkt5sWoWpDmJ7VePkThl2zl%2Bs5Af8UpQsg%3D\"}]}\r\ncf-ray: a3cda9e16934c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1698,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9c218a0a002bb42dac29ad226d131cc2","sha1":"be6185cf1e14b86e23a3dc2a2fd148bfc4394e98","sha256":"0201517aa3070b7a4d3f1f76ed4e36b3183054237a57cdbae1e6e4ac316c06e5","sha512":"947e24c9071d949a5b39c1abe3834308fbc706471c74ba99e6f995aa30b8dc9cdaeaec98a2994b4a1ccefe7588a68d6a19b928d6444cfb55f98aef1f93ac62ac","ssdeep":"","tlshash":"79f08b4a7e24ecfc8b163b8460e53e16427d06379ca66ce182dd0f2443e41316125662","first_seen":"2026-09-18T04:30:52.679356Z","last_seen":"2026-09-18T04:39:46.062614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":230,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/mainpage","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.847Z","timestamp":1789706332847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/mainpage HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"fcfa-heXdfkBkorlHvtzi4CFkPBVIDdU\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeXEoR8A6W1OagRuNCwy1SngbMGn54zAHWZlD%2FS9jMKJ7AoV60G8SiVwWn3AdVwiwbngqq3TVXvxH7xEHbp2FqTaxu27%2Fz%2FW4qW61aCSptomRQPWtCfax0%2FzoD9Et5fA%2BNU%3D\"}]}\r\ncf-ray: a3cda9e4498ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64762,"size_decoded":5941,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"194fbac90c5d3878e300baa41088c774","sha1":"85e5dd7e4064a2b947bedce2e021643c15480dd5","sha256":"aa4537ee3fa9efd06aaff86954d171bf80bcf6d186a4487c8085a3eabce3df4b","sha512":"4acca6eafb4ccedaed57e6a0ace20e0a8ae019150e3049e298e4a4d5c28579c24592ba4a9076914feeead35f346ab5173c2e5b62fe1c30b38f274377fda1fd13","ssdeep":"768:5a7WtZWQ5v4zrZpol9uCpoCS08JdhqQbvP9jv2hNEg2zRqlowQESJPas54FnIPDi:1v5NivdHkeN+","tlshash":"7253357e07bd7c34e63142aac10e75d3b4c9f13fd884861cf3784925c9d99aa2a9e41e","first_seen":"2026-09-18T04:39:46.06377Z","last_seen":"2026-09-18T04:39:46.06377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mines-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.283Z","timestamp":1789706333283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mines-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"cb6a-19fb30bc3a8\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fw68M7vfn6cRqrp%2B1f7KIDx9LOu3kSIQImPsmEYKcnZaIPSd8vlD8Q6XdX1zrpKAUJS6mYg970UQhMu6kPKt%2BG9oYStNqm4uT3CHRVQISJrMAhwB%2FNtgiTje7qXvR15nHQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a17c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52074,"size_decoded":53524,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e6dd7c5d9beb5bf6c03482540c5fd84","sha1":"dab2e778a18045a007d7fd1bfcea317c2cdc2996","sha256":"557723694980cfc077065df089e3e1353ae359d284052fef12785ca9769e9dd4","sha512":"76181aa202b53d72e2dbebf89970442ee3daa78c116f0e7c247a826fe7257dd875f58e69148cea7def4b84f67933e262cfe63a36a7858abd728bb033ea26ff64","ssdeep":"768:7Tei0rT4SJCfjAyXGrQk7U3xjWBZM/ZS7CkkzkD1G1yr+v3NX43hCV4lAouCsY0C:ui2CbNXoQWM/hDzu1G1yOQo6r","tlshash":"42330248edb40b80c272ee7d469177b1cb24ff69ce4ba85f6484b39b307d5a2d863854","first_seen":"2026-08-03T05:12:55.403392Z","last_seen":"2026-10-13T05:49:27.838263Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/plinko-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.286Z","timestamp":1789706333286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/plinko-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"c198-19fb30bc4a4\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOhfl4c6W6dsLCcnBTE7jcBvzm6yYICprdTQZTljHa8ak3qiPGJKsd270wvPxJ6bBugXFy5xaOW0Ll5OrQ652jmR0IrE4z2awAEkeWBLCwZD2V%2Bq6bCOFfN2K%2FEmNSX%2BSKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a19c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49560,"size_decoded":51010,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb44900e7ba7846fd99ddb711205d3f7","sha1":"34d327bcbf62771763a5638e0ce2e514c51a7f86","sha256":"945a5a2123b127568550250d0eccec85732139d5b8369d10cf2786fe681f0aae","sha512":"db68043d0e5bcf920da4af12ae599ea3162d84d96d009971e63e4d0fb555e259f9deb77571a0bc033f45374ced86c739dccbbababcbbb8ece2e86a44a6758985","ssdeep":"1536:JoErMPIb1FT+pjEyzi8AtbIyUllp4Spys:lqIb/N8AtbIyKlpJN","tlshash":"e123f1bd7bc5e27ccc0a1bbb32d51e8d86309c08dd25ae421765e050efa92506e5ee4b","first_seen":"2026-08-03T05:12:55.460818Z","last_seen":"2026-10-13T05:49:27.792176Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20doghouse2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.294Z","timestamp":1789706333294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20doghouse2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"5ff2-19e87ec3977\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:05 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5%2Fd2TQiO1moCwJKjHdBuTaYoPCKDHH72qrzW7wmfSSh9OFPcWOrpZiuyKLzgAYp%2B1hXZC5viX1R0hVl%2Fa8wqiWgxZyn%2F1M9zutykF2Hj4vnZ6LTEgtkx8%2FFm%2FxuVR0nk1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a21c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24562,"size_decoded":26018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b8375cc142490d5c100642b6e07708b","sha1":"136e02d0079c82c415c54ce9c4b38e453317882a","sha256":"9ffd8d162fb2081b6938efc5eef9466b92a61ea81de30642aee9da49af78eb83","sha512":"6cff72933a3d0056f09ad8ab14a40915177014f0cfbe97e5b37e0e4b979e8dd8a5a1c0ea7b7400db86c01ab20b418f302db1940605cec8f9efa4c606269ffc3d","ssdeep":"384:MK58qfWdepslW9FZKJ6I6GyYXOqZly2YGobRpxgiMs6QA2tbdtP0UAm/qm5P7sHx:58qfJpslW9FZKJt6vYX1Z8J7ss6ytbf8","tlshash":"b7b2e09c5a14ffc5075017c91fb3b0c38dd04b7daf5ea57998debc4a44a1230a8fa41a","first_seen":"2026-07-10T22:57:05.853292Z","last_seen":"2026-10-13T05:17:51.214022Z","times_seen":1221,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/cricket-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.251Z","timestamp":1789706333251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/cricket-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"28376-19e188a0797\"\r\nlast-modified: Mon, 11 May 2026 19:35:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC0YcrxXoQeFcm7VokjuotSz6AWbFy%2FuWpsju%2F3Jkinki64U13efOgBW8bAFUeCt4%2B51uNa%2BidPSJLhkd%2BWaGVhjVRV%2FKgtIKUZITmSEYp3W%2BC3x8XLTB1JUre8vwJvAkIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6da03c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164726,"size_decoded":166186,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1e1ba05a859bbbc01900d9ba08880e35","sha1":"7e9c385589952ab26f8f04deb098622c4310acb2","sha256":"aa6523b76b4bd7c120c494515236995d2583f085d9b9e73d96482b8d55064822","sha512":"394bf0f7f744e63a365f3c5e046e448924c15774bc15f4b435f27a3c4d3326a4a8cb6be51926504ef11006f0238802623e1c40b39a0c91b612cfc657bbec9914","ssdeep":"3072:yHEh/mHTKsEg0Y12Wuo0DNXO3m6IMgNiMSBTJWvRiH8wJzudjsuyoB0VFvqBZ0AJ:ykaTKsppSDN1mgc7Mp/kudjf2yfd","tlshash":"5af3129f461a6f92e6026c204b86cb7d63e4c4314c597d6738a8687c341afd2897b7f8","first_seen":"2026-05-03T09:25:58.532508Z","last_seen":"2026-10-13T05:49:27.848074Z","times_seen":1706,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-mouse.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.297Z","timestamp":1789706333297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/fortune-mouse.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2d5b6-19e9f374783\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008386\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xC7aP62wfdWTnqhTE3daeAeJ5ELnBhfnXEECOlj0g1d%2BET11iXN5%2BF7VIn1V61fuvGtfvMNJBC4elwRZizHWuOsjGK9ym9OlqHq%2B%2F9JPYGA3MTdrj6GsFHXU3bwqAaxjw8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a23c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185782,"size_decoded":187236,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87ac16814336141ac5e165fa0b6a3fa5","sha1":"727543093d102af9d3edabf2455a73337fd08060","sha256":"ff5a8367ce6488c9e91b2b63d0866494a7e74f2bf88813ebea1f397623c48765","sha512":"0fbdad1d1d392617e8f50bf38e9c1ddff82b93f4d99e1d53c79bed2c798c1fe3e5b265b6dddeea4cbfa9ee6a6df964c2ffc901e2575f4c079d3997b108c5e5e5","ssdeep":"3072:Qs7NdPtcNjxqzdYshF2IfvQirScUITN34lGnYI9SOIsxtK4xHrnTDnGlC4/Qd:vrP0VqNecU0Z4lGyOIFIHrTig4/Qd","tlshash":"6f041286650f316d7d70eab0b79d641b8a09ea9f7d14083187f35ab949b932c4d322fc","first_seen":"2026-07-10T22:57:09.656842Z","last_seen":"2026-10-10T11:48:28.472317Z","times_seen":442,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/index-CVwvSGG9.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.787Z","timestamp":1789706331787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/index-CVwvSGG9.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=GuomWA0LyJCnyOMU; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.83; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-e0971\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDseh9sAIVYHo%2BxITS7d2tvettdHyoMyjBJqVR1mtOvWgrWZ3SpXA9PDEiXfvWtFmOzLBlo9CZ79whzZeAiWcsd2piksp3vufnRv7vjeNICQOStK7C34B2Psmea2\"}]}\r\ncf-ray: a3cda9ddaaf756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264118\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"GuomWA0LyJCnyOMU","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=GuomWA0LyJCnyOMU; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.83","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.83; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919921,"size_decoded":265233,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38970)","md5":"03de5c76bc984df8b89cb6161761b1f9","sha1":"57a7d6d980392239c5838ef04975c0376832973e","sha256":"24a5f4b374ed3783bb86aa6610e330a8f26c940056b7350021044d63c3c61cb5","sha512":"a6b8edb994348bc7d979498e80ea25f3df04b1361ab3470185f2ee9f11d39f078910a8a743e745788e6761daba8abcd77eaa5757d60c1efc2d83f166a4a37c10","ssdeep":"24576:Y5wHfHYMKM0visuagpGRLTJ7tR/og3kFIvTBBMe:Y5wHfHLKM0visuJpGRLTJ7tR/og3kFIZ","tlshash":"1c156b84b181b9fda7770bd564af9029b13e2f24f91ec480f2bc58253a69041b667fdc","first_seen":"2026-09-18T04:26:23.201868Z","last_seen":"2026-09-18T04:39:46.069174Z","times_seen":12,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/wheels/status","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.845Z","timestamp":1789706332845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/wheels/status HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"eac-40d2uT5up4oNrjhGah1ClTj57Dg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qRWN9WGTvT5xGNZ4%2FKnpp8Io9xwi16AiA%2B4Sdpysud7Wk2GYl06V%2BSYAS4I5Jupli75MvKvKSytM%2FW52A5AGFiyaID8onLu0AK6fB4ZTdxUZ8a9CL5OHvVkKVUIE9pJQWw%3D\"}]}\r\ncf-ray: a3cda9e4498dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3756,"size_decoded":2028,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99597072f6ccbe42c379ad34d300f641","sha1":"e34776b93e6ea78a0dae38466a1d429538f9ec38","sha256":"c3a27e4b3a82e935e92ef310c4fc6c81808f6b269fc2816d7125f4cca5c38468","sha512":"3baa8e115db0fbf80f64a3c6dc47b4c7cbb568a24a3ba6299d19f2bfc6544c65a5df9bd0526d1739a2e3e2dd7b2ba657bfc950a6093b6293e385725c54dda24c","ssdeep":"","tlshash":"ff7103123d9d8e72c1103a8dfac3823c34d9920a15c0cee6d5dc8e7562d839e6e35e36","first_seen":"2026-09-05T00:55:43.474107Z","last_seen":"2026-10-13T05:49:27.831957Z","times_seen":1662,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/coinflip-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.285Z","timestamp":1789706333285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/coinflip-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"d612-19fb30bbfa0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRfqmB6ypK8FIangnQxhuO4Ei%2B%2Flc6j8DCQ%2Bu%2F%2FDeFdr4eMLDQeM98PrIoxyxjBRoeSk7wVF9tZfJrF1KTQ5S0DuNNimNQUt23X1Xem62yGQRa07q4%2BfNmwH44q%2FTRFOxG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a18c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54802,"size_decoded":56260,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdbaeb3d555252953c048005ac6cf5d5","sha1":"a9dd99896d13d9b7805fb3ac9ed0e1aa8a111f86","sha256":"0dc5eca5813800dc327b56e8be0492ff4773e7dba6ea23f286b91eb8c869e175","sha512":"93edb192566b733bae2060e15deee775c39a3eb106a95ebbadc056f0af909013275d9884c33f18437c5fc43bf768db636d323d34557a35a69ab6b434d858419a","ssdeep":"768:sTayCE2ehaNnd4N5T9MPF5IcpL3EGD3w2tUn/LDYyorbkCI7Ifi7HvyIr1VAmGUn:pyLraNd4xMNt3EFGrg3HfRV3P2gH","tlshash":"063301ef43b922a9ed18b57afc00154235d8b5e29f8d9e12d17085e091cd1a9abc286b","first_seen":"2026-08-03T05:12:55.550879Z","last_seen":"2026-10-13T05:49:27.79304Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20wwgcluster.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.290Z","timestamp":1789706333290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20wwgcluster.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"64b4-19e87ecca23\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:42 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzXdr8s5e9vHmFr9uUW5JFzCo7QElNFlezjFAjkf2vD2OTRcnIiaHGKiENg8%2BgclebQY6kiF%2FRGhlKxU7rxS53w05Ipsqz2T%2Bn4nlb%2Bt0Bcy3ADFzNbWOSTMY7ykALsOL3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a1ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25780,"size_decoded":27232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"466585300847fa0e13987ef5dca6b7a9","sha1":"90fca47f54ecf010dd26cb69ce2865921c028dce","sha256":"9ff5266fea78992d2da49b274dcaad4c97241690a59d0d532e1b3c28090fc815","sha512":"ff9d83dda4da71c8b00c3bf981285093a45f7f48740845a72719f038a072e340284e0750e2662395cb2f1525d423cd5072a388a734139f7e56b62aaa10ea2a81","ssdeep":"768:6Krbogtb1sc931tNEV5/iP7cTPTGfdYjj9g/HhsgoayC:6yMgt5/fyqPvfQj9DEy","tlshash":"03c2e1630732b2b96d7aa69cf89e2bdb115f6011b38d107750a2387dc016eb734242f2","first_seen":"2026-07-10T22:56:48.045744Z","last_seen":"2026-10-13T05:49:27.788865Z","times_seen":1241,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/fonts/proxima-nova-700.woff2","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.785Z","timestamp":1789706331785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /fonts/proxima-nova-700.woff2 HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=5w32eZvBvcx6Y3q2; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.24; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9bff-c4d8\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGTe%2BOw%2FmBcnc3HVj9RYXGDmZjO%2BUi8lA1xvAB8FH1zdQpPHQfAwaB0gII%2BKHKpdtI%2FSYGMXiRJl9vHkVW1LzvERvincqf2wJy91JGPQQv9xTjZvvfQ%2BjdqulPys\"}]}\r\ncf-ray: a3cda9ddaaf556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50480\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"5w32eZvBvcx6Y3q2","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=5w32eZvBvcx6Y3q2; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.24","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.24; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50392,"size_decoded":51563,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50392, version 2.197","md5":"54652f2743682973efaa1232ad5191b8","sha1":"ef7fb431a59f7c6bd4b434cc317ac927afb281e0","sha256":"f9c871b76de94c298c951f897381b6ca535bba70efc108a60953eb3aa4d729df","sha512":"cc4abfaac3419c9d218deadfb74c83d3abd1d81e6a0b30c6bf05df4526a905cb18fd7cd5a00292d63a46489664b10d933f6f949dbcfc9e8055d3eac0e58e5721","ssdeep":"768:NEw+/PImIfmmHM8N6tTltBbQBha73TpQp4anJviPMcpx8bTmnvC1oaHRdFRW:NCHImIemHWlnbQzg32BJEXLyAvhajW","tlshash":"b733f155327b51182cefe5f3b34ae058ee565fb5736a2e038c4b0ec020a662602f55fe","first_seen":"2026-07-22T11:06:27.388003Z","last_seen":"2026-10-13T05:49:27.830201Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/fonts/proxima-nova-800.woff2","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.786Z","timestamp":1789706331786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /fonts/proxima-nova-800.woff2 HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=XlmXdlHhMI5uR5ly; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.199; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9bff-ddfc\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyfhcTFZtVe3RsNEUlBW8XkJvhaUW1E6iWl3p4FMlnPz7kPyWfJcjFLGdq7RaZRJ3QihmxbauU5ZCz1BQjkTxokePCawI7fkY%2BYzSFmPe4rbTfJwzOFpNHOWvILi\"}]}\r\ncf-ray: a3cda9ddaaf656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55500\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"XlmXdlHhMI5uR5ly","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=XlmXdlHhMI5uR5ly; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.199","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.199; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56828,"size_decoded":56574,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 56828, version 2.197","md5":"b62234d570a2f321f0b3eb0e8f407576","sha1":"2ae6b0e3c263dbc04cb474bd962f3db4e286af94","sha256":"04500fba7e032d439d12511f6886776baab412b61e55ef94d3a3641db66e3940","sha512":"1c5aac8ea95a4d961778ff6ae5efefb6b7b0ca6a468687b82ee0b18180896475f8a3bcb6dbd69c908af87a229b8f37d179448e4c98c473d8fdcd52d99fd66432","ssdeep":"1536:PsmprCcNwOBEGu99oT1saR61dlbGQIMc8H2LAsairOTfDm:ffxCcT1wleMcSfsHr6fDm","tlshash":"a943e19d480fe940dd913139553a36c9c1508cb5971f9de92afab0ba9b7fbc21f20e06","first_seen":"2026-07-22T11:06:27.425097Z","last_seen":"2026-10-13T05:49:27.81126Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.370Z","timestamp":1789706332370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Lrrpof4N9BmTPtqT; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT\n__ddg10_=1789706338; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT\n__ddg1_=GUVuVrBXChXDtUJfFs9P; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:58 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Fri, 18 Sep 2026 04:38:58 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6YTMCiw4zx8wNIR%2FnTn0%2B8AJQFbkrP4TgS2J3LN3gTdNx%2FU4FWq%2BfM6rsTjn7iT08LT21zRTeAIHaCp%2FmXeHnStYWfByw%2FPaip7KYLD6%2Behrroei5ATTs7I%2BWNSP6rk6oDN\"}]}\r\ncf-ray: a3cdaa092f25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"Lrrpof4N9BmTPtqT","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:58Z","raw_expires":"Fri, 18-Sep-2026 04:58:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=Lrrpof4N9BmTPtqT; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT"},{"name":"__ddg10_","value":"1789706338","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:58Z","raw_expires":"Fri, 18-Sep-2026 04:58:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706338; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT"},{"name":"__ddg9_","value":"172.64.209.56","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:58Z","raw_expires":"Fri, 18-Sep-2026 04:58:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:58 GMT"},{"name":"__ddg1_","value":"GUVuVrBXChXDtUJfFs9P","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:38:58Z","raw_expires":"Sat, 18-Sep-2027 04:38:58 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=GUVuVrBXChXDtUJfFs9P; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:58 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1230,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":6417,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":46,"receive":0,"ssl":6366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.226Z","timestamp":1789706333226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"13ea2-19e1889de90\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzPljtrkljnbzod5FE8Ib%2FgFCnuVqMaJ%2BBSL%2BBCWERFO2Se8%2Faqm1Zatf5dE8GIbSFxRC7X4dl2PJCg3T0HTgaOIkG1HucUHUTeevr53i%2FxIU1jMiO9uTPjkv88N2bR%2BBZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6a9f9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81570,"size_decoded":83027,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bd31dc34709ab28154febf333c9d7b61","sha1":"957e8b303a3a7eac3058fbb67cc82c673569388c","sha256":"c4a2ab24afece8e542c58e54a15c9b5ba387d224aec670a881d89cfc49f63f8d","sha512":"e77dc104b82d541bfbc1dd6a5195a6a9f7bc24e32e4acb2764a0118427fba1bee9b07b4716d3f4228fff4205b447c79ca0e9ac5af12d18e6eac868af1ec8b9d5","ssdeep":"1536:XtLff+jHHoz3d9eMxKlXfg7N2OT0RyDxbH+pMEaJUIitksm:Xt0nUd9KXfg7NrmytgMhitkL","tlshash":"c28302daff75e12428a5d3a7a117770c421c9ef6e2bf2ee12c1a517a50efd84b812314","first_seen":"2026-05-03T09:25:58.558516Z","last_seen":"2026-10-13T05:49:27.813266Z","times_seen":1608,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/aviator-mini-spribe.png","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.244Z","timestamp":1789706333244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/aviator-mini-spribe.png HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/png\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"f837-19fe863bb44\"\r\nlast-modified: Sun, 09 Aug 2026 21:17:57 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 1735594\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NO53IA%2BVYav%2BlAPgv7PZLrsPVRkW7B8I271UwxZfacMEmPt4TKvVvwtuEcTpE5u7q56g162%2Bupb%2FulCtPuXwGRSKlzuk1P%2B%2F9j4N8yBxWfJquJtiIiy9i1CxpMZaXldmUo%3D\"}]}\r\ncf-ray: a3cda9e6ca01c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63543,"size_decoded":64998,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1c52b5f3e659f44a930d15becb7f39c9","sha1":"9e28417a76240110757c73b6faf3ac5ce1bedeac","sha256":"9d16af214603d98995216e1c5fd4f75fa7dda5a61a7be83babe7c8b8871e420e","sha512":"c2a648fd43d03cfb15a20bb5602b5e64ff5178cb0b498e4751ee09f87c98fd2cb9a32b120462e7daf3d411058a9cc3b341b0d3b497c5cde40f9d4a190493a100","ssdeep":"1536:d3k0b7RKpki5PUOzdtZS8YtQ9lFMZ6xQEDf4:lZ9Kai5nzdtZS/mMZ2QEU","tlshash":"955302fbfbb3abde1188524a4b312c25f59e12ca9d6f1497b98420c1e8605156de733c","first_seen":"2026-05-03T09:25:58.463676Z","last_seen":"2026-10-13T05:49:27.789972Z","times_seen":1724,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/pwa-config?domain=vagon.club\u0026platform=web","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.362Z","timestamp":1789706332362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/pwa-config?domain=vagon.club\u0026platform=web HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"98a-LgU0oJMOH5FEzOHjWQV+0s9dBnk\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PzKewS92J4UHT52tnrrJDwjCN8phG%2F5wtFE6mA6LRIyes9PfttIbOqUDw0IxFtrr51sTM2Ol1K2Mvr1XITpSE39n%2BYAZxmPl3jR9HciZ3Z167WWdBlELVy7Jsde3iaM6Pls%3D\"}]}\r\ncf-ray: a3cda9e16935c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2442,"size_decoded":2736,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d506da8e2f0c784df0f7485f0f151d0","sha1":"2e0534a0930e1f9144cce1e359057ed2cf5d0679","sha256":"083a32ce14709a519e3169e4e254a29651cebf3b36d805a23b548079154a13e7","sha512":"981ec90e3aa016836670e9c16b8e014e01376a2ce45e3fa21366f2a39173854063a99e7e4a27ed97ad131558fe7e96003d566ef8d6e0b2aeeaab9ebf7495b9e2","ssdeep":"","tlshash":"aa51965bbe797c3c529607e3b99f3d951338b00566481926de2d8308e3417b4a33bf19","first_seen":"2026-09-18T04:39:46.076372Z","last_seen":"2026-09-18T04:39:46.076372Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":172,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/en-wHC-uAN6.js","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.368Z","timestamp":1789706332368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/en-wHC-uAN6.js HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/assets/index-CVwvSGG9.js\r\nCookie: __ddg8_=n7js3xi92AqS5OQY; __ddg10_=1789706332; __ddg9_=162.158.222.93; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=8wzrPh1af7ZUM1if; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg9_=162.158.222.67; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"6aaa9c15-21e67\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FEL25LdJrWUMpZtceZN0jo%2FbCatR%2FWDhfW%2BP3UU%2Bq56J%2FJf0NYRkn2cBTNkpc22BlkVUKX3ETxnirQtLsm6RmSMiaAuTiQTMWzPdt1WxLala7xdFXhZZthFwF7u\"}]}\r\ncf-ray: a3cda9e15b3656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45270\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"8wzrPh1af7ZUM1if","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=8wzrPh1af7ZUM1if; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg10_","value":"1789706332","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg9_","value":"162.158.222.67","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.67; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138855,"size_decoded":46394,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22960)","md5":"2ba7c5a110181c74804781155ea369d0","sha1":"413db40eb0542f4bf39ee5135c4e77619678e3f6","sha256":"5ff607b5bcfd6bda50e6f47ba87a7bba0a560f7004357d7650f21f82c870dd75","sha512":"8125ca427b857eda8c2e443eacf0372f6672e69b7fd246a66fbb9dc75a1c20f057cc48c0002f8374af0a7afa86919c93d881a5b060cd7932ce78547b1695c2b0","ssdeep":"3072:oy01C7JW0A9+r6WEl72GngKhnA8VcM6KvUiuuwW:Kz9+rO72TKhA8VcMXvUiKW","tlshash":"fcd33a0b871526bd0aa313643ace3ad577784a25d1e2c455ccdd822c13b796ee13fbe8","first_seen":"2026-09-18T04:26:23.250704Z","last_seen":"2026-09-18T04:39:46.077899Z","times_seen":12,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/currencies?domain=vagon.club","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.851Z","timestamp":1789706332851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/currencies?domain=vagon.club HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"1327-QxttMiwNyqJDpue8PQW2qKoAFp8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHjeAfpH2V1r21LIEwZp4kNn9bxgyPfvjjxVRmd1EDC9KE6yKVpQRfDDTgD%2FKc6K8e4uGBNCLIIOcS8yCTizkbzWuNlOdlK92t2XDa1EbDxEC%2BR9wcQmTbpmKEYCht663mM%3D\"}]}\r\ncf-ray: a3cda9e45995c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4903,"size_decoded":2844,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"be448d88b45cebd5c33dbd0916edd375","sha1":"431b6d322c0dcaa243a6e7bc3d05b6a8aa00169f","sha256":"1ecb5dc525de09c291f480b9d53f03d93dacb46c049c1e41efe1ad097e75b2ff","sha512":"3fa3edab6f3edd0ae01bd422f7cdec65173354b33b82b7109da14fefce36de1c89a48ef665b369e78ad5d450163b80ec479fc3d05ac020c94ab3fcdd672ade99","ssdeep":"96:INaZdeQy/Sz5QZtQwvM18E+gVU7zP6S1iuy1B:Ig35SQT5VUf71iuyv","tlshash":"83a154af342d9ebf4613fde2104f4fed6639658200cd9c696ed90a7c4282af4426b774","first_seen":"2026-08-23T23:08:29.799711Z","last_seen":"2026-10-07T02:50:19.229353Z","times_seen":27,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mine-slot-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.242Z","timestamp":1789706333242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mine-slot-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"1b448-19e188c4ea6\"\r\nlast-modified: Mon, 11 May 2026 19:38:28 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLslS5NM5v8cvOfa7epaTJOw%2FNLvveAfFrtnl88nvK89OatlXunTTrkQQCcZIiU4e3F8Naks9vXfYb7CFVeGYBp%2BIb58LooLw%2BWus9jXJfIBVldnZDWc%2FO5xAT2qWF92HR8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6c9ffc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111688,"size_decoded":113142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7406dba4e1b62922d069c29462970e92","sha1":"2bb50a426fc171056758c2f1fe4da069bd317a55","sha256":"a1a7495aee2e2ec7e96d71aba77df32c181435df6daaf59f1f0dfbcbb1a89397","sha512":"f5624722848711d80f1d17db89bd6f160f8e8535f5c6e5b397925b686dea04c0239eca11ccbf753ffdc1e97d2c5006356d4ddeac83501b989309a8a3c62ed43f","ssdeep":"3072:PBZq2UAp8x3gncKwSfB6eC3QxHPq4Sh27r2neBIQWzUomhHVD:a9Ap8x3zS7CDt0PmeBIRt01D","tlshash":"04b31242f3751568dc6d93f93589eb067297838883476aa6ae233256d409470b78cbcf","first_seen":"2026-07-10T22:56:48.049907Z","last_seen":"2026-10-13T05:49:27.81845Z","times_seen":1703,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-gold-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.260Z","timestamp":1789706333260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-gold-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"2bb1e-19e1889de1c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0HIAoyX4RmhP7hTZRrH5T%2B1qen9nvo%2BJBtNWJYu%2FMdXFwRfTqQj5HnPsc8esoPa%2F%2BAdZIabtQQEGg09YWK0Ihl4rbMJiaKpXsd0lw0%2Fom5w9cD9AquHpZuehpmIHCLOol7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ea0ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 178974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178974,"size_decoded":180432,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7e6786b8f04722cfa883924cf56e618a","sha1":"11834b65154c89318b09e30540170438279db363","sha256":"d15c8109068462a9bf3994fb4ef6f126253b038b1ed7e2030c23f013dc7a8857","sha512":"0e188cc4eb6bad0ec7a3eb8e6bcadbd2ad447ffc868ec327abe99924d910c8c1b38bf5607442880655d691967bb27c87abbca0ee85fd7ff4180942a96958a690","ssdeep":"3072:wbRMbtR2+Z8ik03JdOr2QjubVpGy1lYxba5gzDdmTrCgqZnC1Wtkbzi6eI3uMkRg:QiR2+Z82Cr/jubVk0I+gvjbCMtka6eIF","tlshash":"1304138e2c596af29f843e48c8d05f3e4a7245e7df80b1d60e0bbcf71e9018867b5556","first_seen":"2026-05-03T09:25:58.480792Z","last_seen":"2026-10-13T05:49:27.841555Z","times_seen":1624,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitsw.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.273Z","timestamp":1789706333273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitsw.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"aab5-19e87ec541b\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:12 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QAdkHrcxUT6JHL0PDmqYx0KxIijPxxHSAYD%2BTb%2Fb5Vde9HOcjhNISkPLl%2FoY7xY8Cv4yEfBGuIOV3OSfIwEib3qt0uhDdHK%2FSfpsTBuT6mtAbJFoRDvpVF3iAJcA4tT9Vrc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6fa13c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43701\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43701,"size_decoded":45153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"20c5f416730af16503567886dc21a735","sha1":"4e65d291c4c2481d1d0a5dc62a68b4aff59c1820","sha256":"27e9c3d08842aa527d828708a6f5c8e98752cf1ed941679ff1721bb6e1f064a0","sha512":"f5a695a9fb5b0fcd201af858ca3242bb083fb5c91361838b9c6e3d30ccd266ebbfc9a2fa165995a8f12ea67f816bbd18bd06adf63630374426bc81bd171ce4f0","ssdeep":"768:hYy74pT9jMPb2Gh4g7JP51WJxjKVOhcfPNmkXbMwN3jCjogRmu9E8p9wiARnbr:hApJjMPb278sJxjKRPNmkLMS35gpXYTZ","tlshash":"eb13f16bc67ce9d3f43bdbf01f354867b3a1567f96a26382783c5a5823d44014ac9728","first_seen":"2026-07-10T22:57:05.917845Z","last_seen":"2026-10-13T05:46:50.946936Z","times_seen":1254,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:39:13.016Z","timestamp":1789706353016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:39:13 GMT\r\netag: W/\"a79-Jug6dxnxz7prb03s9zbbfaSA5N0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BZ%2B7vodOa95wlTxuYqn6eZLOpCIh0RTqyPXYeGK9zDjYu6FHNVP%2FWiNFAQzVcBvA%2F3q2F1fHplutMekwfM8F8bpENoDy1eWAajK3CuoSmShvtdAGceesHoS%2B%2BM7q0fFE1g%3D\"}]}\r\ncf-ray: a3cdaa625cf9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":2265,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1f86eaefa6e826f393dd52ec03f1f66d","sha1":"26e83a7719f1cfba6b6f4decf736db7da480e4dd","sha256":"28c594d61689cbdec17466854ce12b14ae1ed682c01c8834e868e87ee07a80c1","sha512":"3fd573bddfcb8ffdd57a5d0de2a156de924a34c0ade0b8f3fc6053a5304d8afc8c43a11d07e89023e374907886ffa64f69f0d712d3a35cc5ade927b85e8f7c10","ssdeep":"","tlshash":"6f51dbaf95443cbddb385ad0884a749de4ddb1af95d00c09c1aa8d7acce40d939bc927","first_seen":"2026-09-18T04:39:46.081647Z","last_seen":"2026-09-18T04:39:46.081647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T04:38:51.375Z","timestamp":1789706331375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=RHUlluLadxnzAj3g; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=162.158.222.191; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg1_=PRMuCQ87Zb3DprwC9aVJ; Domain=.vagon.club; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: no-cache\r\npriority: u=0,i\r\ncontent-type: text/html\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iViQB4%2BhUQeyeeRsAoR6Omm22PLtNKjB7aQQjSxQrhOM7jLhioXKg%2FWfnuIc46ilPDCTtRY%2F5P02zLf82LLvhiE58RJ%2FHihAfW4JtamMN9DNGS30Ri6E7CRydM1J\"}]}\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3cda9db4adf56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"RHUlluLadxnzAj3g","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=RHUlluLadxnzAj3g; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"162.158.222.191","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.191; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg1_","value":"PRMuCQ87Zb3DprwC9aVJ","quoted":false,"path":"/","domain":".vagon.club","expires":"2027-09-18T04:38:51Z","raw_expires":"Sat, 18-Sep-2027 04:38:51 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=PRMuCQ87Zb3DprwC9aVJ; Domain=.vagon.club; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3988,"size_decoded":2439,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e4a85eb40048de8c412311e30c083054","sha1":"f665d77eff058765459bd9fd42b999efe3b93763","sha256":"8ffcfe8ef236eb81b5c6e3c5bfa08284a9044a2294be1638c6d28c97b00fe6ad","sha512":"70eacec9b4bf5a4fe5ddab2df7dbfcf379e50479c83f40ad52b1f96098bdca46929d237f4088b2725ba0b661779c4c63a30e40cbf7c1cf305a40103e0bc4dc1d","ssdeep":"","tlshash":"6a81630576b0b894027257386ad3b448ee61e647020cada4f98e50ee1fc0b95cbf3b72","first_seen":"2026-09-18T04:26:23.22469Z","last_seen":"2026-09-18T04:39:46.083754Z","times_seen":12,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/index-8jGlR_b7.css","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:51.797Z","timestamp":1789706331797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/index-8jGlR_b7.css HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=RHUlluLadxnzAj3g; __ddg10_=1789706331; __ddg9_=162.158.222.191; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=E11Z4A261MR1woT7; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\n__ddg9_=172.64.209.62; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 18 Sep 2026 04:38:51 GMT\r\netag: W/\"6aaa9c15-43792\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXd%2FyeoCHTXq4R5MZtumimSCYYt5h02DEai%2Fx2dSGQu%2F3bEnBC%2FsEMocyQKz7HG%2FAyVNCA9dTjk5VKBKINMRBDlBI5xHZexBnYpb%2Fax9TaF%2FuHxJ8VwQsNGpCPZi\"}]}\r\ncf-ray: a3cda9ddbafd56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37105\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"E11Z4A261MR1woT7","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=E11Z4A261MR1woT7; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg10_","value":"1789706331","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706331; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"},{"name":"__ddg9_","value":"172.64.209.62","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:51Z","raw_expires":"Fri, 18-Sep-2026 04:58:51 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.62; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276370,"size_decoded":38216,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5da2913478b8297aa9f290bdcab9fdea","sha1":"a18ce98ccc31d2c3d4b0bb9b1e400f12205a8d10","sha256":"ff79d7ef1b35f8eb7d840489047c9f5630cdf72ae803f0cf046130d52e4483cd","sha512":"9b3a8434248b4ec702f513989f0bbdb3d0afb8243758b339541d24efaef78f12151c837d9f38015812b07cb13020fd3eb740e4482c0f6f3f8510ea353e482151","ssdeep":"6144:U6tcrTp+L7v+W5N054S258tc0hQeImaExEYMwSFZo6E3RYndi8rZBn49z+R66fKd:ZV6","tlshash":"324482a0b235e53fbc33b0f9d39ce88c610ab095de264be9bd51602227c77f55c66614","first_seen":"2026-09-18T04:26:23.231695Z","last_seen":"2026-09-18T04:39:46.085729Z","times_seen":12,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/assets/win-cash-CHofxrqH.webp","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.499Z","timestamp":1789706332499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /assets/win-cash-CHofxrqH.webp HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=kLRjxYoNKfHpNq56; __ddg10_=1789706332; __ddg9_=162.158.222.207; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=xGYQay3b7yNo70h4; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg9_=162.158.222.231; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: \"6aaa9c15-f84c\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbK0gFo3rIuJPu2b5BewWf6395X6jMPSmUDXJ91MIVpyiIDkamFFlyrXMXJDSs00UKjzodH6bBIIiexYSKCDtXuyZg14OkCaPK%2FM1AdcawwsgI%2BTAxfWpC5UXjT8\"}]}\r\ncf-ray: a3cda9e22b3c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63564\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"xGYQay3b7yNo70h4","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=xGYQay3b7yNo70h4; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg10_","value":"1789706332","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg9_","value":"162.158.222.231","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.231; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63564,"size_decoded":64640,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae60319d41f63eae7109c16305553d3b","sha1":"ebdadc59c48453e46d9a9130df9ab82fdae1d0c2","sha256":"94f291a905db8a05f837866d504aeca0e34d8ed42c390f74bd79c4a2d04ecb65","sha512":"4fa704b949384c795690fec18e2a042588b387cd4876c0c62af0981eb0242a651841dcf87fdc88b9474020022bf616fd7e6fcd8cfdb302203fa46b42af05ecc0","ssdeep":"1536:ush81eOGsNlT+F55lwOEK7C/lgjKHK0zLIuBX5krTEXq:usO1eaHOwOEK7CdgID7BX5eD","tlshash":"3853d038c1dfd1a8f179057f4cacf411668e4c1df2abb33900e1626f284d295af79699","first_seen":"2026-07-22T11:06:27.439661Z","last_seen":"2026-10-13T05:49:27.817674Z","times_seen":1593,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rabbit-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.234Z","timestamp":1789706333234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/rabbit-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"266bb-19e188cb63e\"\r\nlast-modified: Mon, 11 May 2026 19:38:55 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGXIWIBfajgXlGUr%2F4NUSwuoIikiDulSA0wCumWxvoWLqVbImNkZHYPDPSHq7QME6h9xtkyXhIjhPiNqF5iesqvmff6f2M7lfD9R5d%2FY4NuX4lSlKp5aXJ%2FR%2BrlL9XpCwnM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6b9fcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157371,"size_decoded":158825,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"350386f4ae53bc8b1e470dbc414eb3a6","sha1":"d1d4472c746f237c379d64794389971df62dbeb9","sha256":"974fa37657af78ae7f1695c622ad77f544cc19dd6c3bb29502ba7e6f4b5c48c1","sha512":"7ee319101357aa4bbe8e6c0eda5ca456d062d8fe15a6298e01066491c36ba25b534266b8ec19f2ba1dfbcc657df1b0c849ca65c57767743ff21269550e04144f","ssdeep":"3072:n3qGl6Cx84WbG3geXr6LfjDcjjeZa0V89C/gblDXNOVR7E:n35lkYDXQrYjC9AxblQ+","tlshash":"6ef312530d7981eb4b9bf6e3b9040aa01c026b4d37d183bbe79deec869d58bd08c5305","first_seen":"2026-05-03T09:25:58.450756Z","last_seen":"2026-10-13T05:49:27.791066Z","times_seen":1605,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-vegas-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.246Z","timestamp":1789706333246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-vegas-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"1d4ff-19e1889e1c4\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FortMhiYFGWMfgTJbaiCtoJOb9CxsLj%2FIMJGrMIafv5AmpGA6JjRUzR0dcjL3EKD6KXfWNIi3D7LUSQoglDRsY60NNLg6qrqt7MlbDMjgATGNapm6NnKRTW36yueGaMfis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ca02c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120063,"size_decoded":121513,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d97c882f1efb1cb1a0602a1409eae227","sha1":"fed1caf3f89fb7c82227e37bd3159eeca20d05d8","sha256":"5a11d7cc3d0dcb1cdc5b76a698c907e6c85bee99c68ec743af24df813e67fa29","sha512":"c5cdd38a27bdf7e64929d9dc9092c4fe80b96a1bdd38f865aa1e9db9c207a34e2daf50c46aea9ada68011e8264e5da1a3ff18bc7573f1249e3b1cc0789d32080","ssdeep":"1536:w4cNnWnyYHZDR+gQngdgg768GBAqx4v6QI0ZbVZY4EamRVW63QTnwHe6mp3ZyNlO:oEJHZDR+gasY8ZYNaD6WwHHNo1","tlshash":"e8c312e970881bf8d381ea1ffa06ec26027a87c97fd32cb882486cbc4554e5dfc55161","first_seen":"2026-05-03T09:25:58.487822Z","last_seen":"2026-10-13T05:49:27.787444Z","times_seen":1614,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/crash-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.287Z","timestamp":1789706333287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/crash-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"f52e-19fb30bc0b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWLLWEqcr7LmvCfWc54Vlzo4ki9FWqMzcO4KnPEiJn0gkPUveOoOg90YjuOWJETf30rYkFA72xgIw2yW81oGRGVkBrygpFRfqQ5h%2FEB5YANWAWvw7skAaKfQv%2F0utJLuHp0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a1ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62766\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62766,"size_decoded":64214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3e9dc79e30339acd6fe5a784b66ecf4","sha1":"85959fc05c9e530e5a99db417357929624c01aa6","sha256":"db0dc98e77734eade49137af6aa78048bce08bdbaf48ad06bcd054ded5fdb94c","sha512":"bc37983ad7d5cc31482132f758d38b4a19ae2caaf1d8b578967c53cbbd0eaa85bbe9c1b9b517806360a0457df8a2c632c0a500dc04dd3e31ee2f69ed5d7d0b06","ssdeep":"1536:DpGvlHDF4TR9mRcJgHqmZ3HjX5l/RGzasqDFejYsTL:DpGb419mRcJCtjJZTDFejYsT","tlshash":"e153025070e726abfe0294b014709a3feedd792c74b59cb511839bfa11ac0cd97ca4c9","first_seen":"2026-08-03T05:12:55.553159Z","last_seen":"2026-10-13T05:49:27.833603Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/favicon.svg","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.670Z","timestamp":1789706332670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/\r\nCookie: __ddg8_=xGYQay3b7yNo70h4; __ddg10_=1789706332; __ddg9_=162.158.222.231; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=k1mP1YNfyqhX66ul; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg9_=162.158.222.207; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6aaa9c15-6b2\"\r\nage: 537\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sytp1bwmyuqvwydi67BuPGukz%2FZJq07YydlTuTLpczE8CrFvCrlKfDTyIIUROJP6E5Gc8B6igtz2yEW6jzb6uMWaIFFiwO258NFjC5EeuKAAMyrGrimitpmX%2FmX%2B\"}]}\r\ncf-ray: a3cda9e33b4b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 825\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"k1mP1YNfyqhX66ul","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=k1mP1YNfyqhX66ul; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg10_","value":"1789706332","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg9_","value":"162.158.222.207","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.207; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1714,"size_decoded":1877,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c939c1002550233de2345e6a1deea5d9","sha1":"76c96e16e58c808c19bcff3329efcb06ec3bc54c","sha256":"512b47d1440b1ae2ee599b6f50907ca97cc784d51751d10d0e0ccd1f7f477bd9","sha512":"109ccfa8aed17d69d695ca5461f3e10df97d22c941030d16ca09b54f39dd8a6ca502f80da48cdf8436415f9febfadc5736f2f382e0e814eedf142c711ccb9fb1","ssdeep":"","tlshash":"ef3194b0e195b423f700e3fcc924f8e5229b1aaf6491c958b3c02d0aa49859e290f993","first_seen":"2026-07-22T11:06:27.428016Z","last_seen":"2026-10-13T05:49:27.827641Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympgate.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.278Z","timestamp":1789706333278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20olympgate.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"6cae-19e87ec872f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:25 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008388\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRyMr9Gwq2k03EqbSNP001kImCm22kB2Q4bIE1YCEFPauQ1Y8o98ggJI9dYShEDFzqjaOPA%2FlPzg7E2QgkH2eX1ho%2Bnb8bGDYnqm%2B6V%2Ffn33UaxivOFsiu%2BIxLHTpib9GSk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6fa15c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27822,"size_decoded":29276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67a9f14667062ed7354e711966e13f6f","sha1":"df69b5e3720f0d72981cea8b6b242ae18a9087c8","sha256":"8fc1a0ae668b1bcfadd45af5b0c9184a82c16e186ee88db6b014cd58e893950c","sha512":"5740b95c0ddab506d7eecaf3d558766255036bbe35f15623dd226d1a6fc71e97c0103b8045436c8c50266a0ea7251f7ed92dbe9da176fdee6cda78ffd6ab5066","ssdeep":"768:rSI0kwqIQwzv8jgHqYBpvaphCvCV5wDH3bF:J/wZHTVvCVWDXb","tlshash":"fdc2e131f92236dacb45f3f584d1c7c0123f1191589e2316ae9921b5e2f87ea7c5239e","first_seen":"2026-07-10T22:56:48.1Z","last_seen":"2026-10-13T05:46:50.938205Z","times_seen":1277,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mahjong-ways.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.295Z","timestamp":1789706333295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mahjong-ways.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"286ee-19e9f372430\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008385\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFxKeA%2BdvlWQGz%2FW0T6RBXOOExbAOKP4x%2F7J2coh%2F85AIcjfkPja%2Be6yJSZVAB1HfXEp3Ya32cF9GJpm746K%2F6PFOsxg40%2F96isKwXuniJrVNuYN4sy%2Bha7v8mmpcZD06Y0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e71a22c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 165614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165614,"size_decoded":167076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95d68880948c873c58ea66e23474ec69","sha1":"6631b75dc45db3bcf97429f32a1ad56bc107293f","sha256":"7205c06940e908eda5afde23f70c4e6fdd86c1a2cfb6fc3630af5a1471c4fd87","sha512":"62090b6c01be59590f4c5c87c95229dc16dfdbd58255da020214914ccd661c07e97490a4d9556a6fb7439db81e22e66623bab1041f87cb69dd09198aebe92624","ssdeep":"3072:bJ8tGOuljN80yHozDPYzZHgpzv0sWptTY5twl2prCveK118JQtRyvunMU:F8ghljmo/wJOF2RiwleILymMU","tlshash":"d0f323c1f4f81af8f653986680cdaa4b5e66a9b62d1bd111bc429b2c1ec0867e3743d1","first_seen":"2026-07-10T22:58:17.931148Z","last_seen":"2026-10-10T11:56:07.201394Z","times_seen":393,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-vs-zombies-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.303Z","timestamp":1789706333303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-vs-zombies-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"49ec-19e1889e2b0\"\r\nlast-modified: Mon, 11 May 2026 19:35:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHXNbljlzyIEwl7rH9gkONkCZez68Uke9Fs8kQxu7FqhzlwmI4pIYkuBoROPzAyZUH1eyF%2BVIdlNEfl4czgN49anr%2FZkpZQOcFd6DFbjC4M14K6iOjxegDEp14kEHisZin0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e72a26c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18924,"size_decoded":20372,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c496079d347b741f8a61c9ff13e5f25","sha1":"d34e547f81a344f52f32078078090b0e6dd0c549","sha256":"6b61c65973ee02deb325d6cb91f24c3201e376b4fbb3bd25c7dbb14ebe1b28b7","sha512":"a1030c0c003398488e2b35d4e0777a0f7de2936831b2ab3fe0f21d64290e84db39fd293b0ea1f8a0ecc35e99e0e7c927d8699f0cec504219d226e1c13464f488","ssdeep":"384:zGjo/RN/ZF6TOfWpzF86HGv3QVv/bOwvJ9WHV82zghRHl3Kb7+q:zGcZVZZfy587vYvyw3S82u3KF","tlshash":"ee82d1e92fa5f094e296772451135350523390a01d40de8bfdf9e27f2932e509caefad","first_seen":"2026-07-10T22:56:48.11117Z","last_seen":"2026-10-13T05:49:27.807903Z","times_seen":1625,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.849Z","timestamp":1789706332849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"a3e-xhi4ctSh8bdEfMGDpZvgDyTXQkA\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGG5xagKjFpFumaQeyiXH9nznFfIVuK63GebY17Bj8SYDSckl2rnDoLoE%2FnkAvXcB2BCfjPf3nfes3dRdYjCs3VjcYX0nRINeOdFTAdCUQkMWZHujRJDr9PoeLjaTV9l9Co%3D\"}]}\r\ncf-ray: a3cda9e45994c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2622,"size_decoded":2253,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"208bf9468c4497812ff8fa6dcdd6122f","sha1":"c618b872d4a1f1b7447cc183a59be00f24d74240","sha256":"963fb641605845b004408bd6006dd9ea580e27b865930ad86f23911f3142ec41","sha512":"d606f6c8597f34aff4802f50ed5ddfa6aeb023388d6ec1b7e2bd5ab55c271dc85f2a425ca9f2225c9d67d3f91ee6bda75d04f5b1b41b405300bea883bfd41977","ssdeep":"","tlshash":"a451cd6f84482df8eb350ad0848ab09de8dee27f45d01c09819e9c36ccf45e535bc963","first_seen":"2026-09-18T04:39:46.098608Z","last_seen":"2026-09-18T04:39:46.098608Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fparty2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.267Z","timestamp":1789706333267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fparty2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"5de2-19e87ec4fab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqHdSRSUUctwgLEx5ZWDAVPzhoLhEKMNzTOzgA0I99bUu1xFSoNhJ26q0ifT%2BbN0TerHUdj9pLiW9rtjFE7FUgrbccc5bf0AaA2fhBLfPluSDCj0qUd7zk3Bqiyq1i9v0fA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ea0fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24034,"size_decoded":25480,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7161f3dee408d108342e9e493f909cb5","sha1":"4b222932bfc1c35565091316edd289960b13b60d","sha256":"15238cc480c000b408607fcbfd0d3cc978ca6ed13f08a450f75f3b6de8a5eb02","sha512":"24930bfdc8ae5dab65139966a3b51428bba54ddcce47d52c9aadfcb41409030c0f9a8b1510a493fda7768cd4b56bf611c9f3a1e774cf96b14228739d142f3ca1","ssdeep":"384:yUTyQuU+GCFhCtevu528zIqnolnMB0LhogwGx4OPd1+/HrkKKsTOOpzCEj:yUTyQOjC+u+qnolxd6OPT+/HrnTOOdnj","tlshash":"16b2e1d0a815d71e990222cca66c1ee7ee6ba58b7bc00331cf3890e6dd18857a759cb5","first_seen":"2026-07-10T22:56:48.070404Z","last_seen":"2026-10-12T12:10:45.710018Z","times_seen":1248,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.197Z","timestamp":1789706333197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=LKQQT9XevJ5prcrm; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg10_=1789706333; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg1_=xIC9jKqkd1rUz2oiaDHn; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMMFmmX2A9RD%2FddhEWXqcNoVPyFVsqRK6o8xD69ruxU7A7rSGuTXSY4lRVrnjsIdEuzXIuWMWcCDtvlgCyL4PdKs7RPkvKOOWVR6C8Ek38QVSBLrzZXL8iRUIV2sHOZKjszj\"}]}\r\ncf-ray: a3cda9e69abc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"LKQQT9XevJ5prcrm","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=LKQQT9XevJ5prcrm; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg10_","value":"1789706333","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706333; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg9_","value":"172.64.209.56","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg1_","value":"xIC9jKqkd1rUz2oiaDHn","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:38:53Z","raw_expires":"Sat, 18-Sep-2027 04:38:53 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=xIC9jKqkd1rUz2oiaDHn; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:53 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1216,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlightx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.266Z","timestamp":1789706333266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20starlightx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"89b2-19e87eca9ab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4n55FbxqPn9cZZCowKH8Ez6g2nUhzzmTlYYmv%2BuQxqCEdXaPOwlSENAGzNw1HZBtTf6SRnRF4Om8v92ONQkjpb55hBlx6LdMU7UKUHZt4hkn3FaxXbp761%2BV5A%2BB1a11OM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e6ea0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35250,"size_decoded":36700,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3ae3ec5a75801b381094718d06dcab2e","sha1":"7eb10ebde706bbcab68295ee9fb2af204c97886b","sha256":"3cdaf2affbb77d8a1e05ecd3bf913ab2029f2067674709c4564fdb7fb2e25aa6","sha512":"f61ee24ee3d37c2fdc9d4ad7e5e6fbc1125475dbb11ec79f4ea977fd95a80ac407c720096081e2cc3defdd8819c41a35a2eadc2b5d326b9d4b65a9ab4b00639c","ssdeep":"768:nEnkhDG+JBWk2KiU3xY08SwZhfNqhz6uMkncw3ucL655YSG:nEnkhfWk2KiUBY08LZlNqhaktL25YSG","tlshash":"3ef2f15b3746bcd6a6cfb94b28bc5b0a7e1e1811d5f12f56c148c6aa2d3f47c3a63012","first_seen":"2026-07-10T22:56:48.050838Z","last_seen":"2026-10-13T05:49:27.819944Z","times_seen":1113,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/limbo-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.288Z","timestamp":1789706333288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/limbo-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\netag: W/\"da8e-19fb30bc2b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4008387\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3fM1RamxVJph1Nyj7MMc9AzLuEaFyZ1uT5WGuy4TfKOhvZfdB54B%2Bwvsajsn6Tj4W2%2Fn0%2FzeTX%2BS8RQ5OSD%2B1WZgSRt%2FJE%2FPgHxp0ALIYDWMteJxDITLfctkDpTL0gp9N0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cda9e70a1cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55950,"size_decoded":57408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"755a57f21433f5bf1a1b7145f1a2a5eb","sha1":"8c87413306efbc9419f957dd1c817ee7ddc33d9f","sha256":"96984de1dda99e6efd61393948fe3fedcee4f942294b52c9b5b3dc08d211c5fb","sha512":"e6760f51471651cf252c3f9c565c87cf8e85508b57a40ed2e78b600f3aa26840f5c4fc9a6358aa21cc6d8bbaf8cdb70894e1d8d40dca07ecefe97f6cea58905e","ssdeep":"1536:bXK1HSSrMgWqvmjrICtMBHAd79Abas8QY:OhSq5XME2cHAOasQ","tlshash":"284302f307e531cafd249336aee1134973b2ad48d7644785c1ac43e18a802eb677a9f0","first_seen":"2026-08-03T05:12:55.507803Z","last_seen":"2026-10-13T05:49:27.821533Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vagon.club/","date":"2026-09-18T04:39:02.940Z","timestamp":1789706342940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://vagon.club/\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:39:03 GMT\r\netag: W/\"a91-1kf4WivY4n2NT+vStoX8ZsEt2iE\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NS8lBWYrA7uJQmS0m0gR9M2QAEDDSXQOJ44%2BjmqbNEK671YmXrhYXYysS71EMFBWlr4NQ9Cs7zQxFUgSWeO8QAVZRkLQceT9QIWWgt8eL75w8pbV0bl7xQzkNSCI%2FSbT8ck%3D\"}]}\r\ncf-ray: a3cdaa236ef4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2705,"size_decoded":2259,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"001b1cade32c3150b94a6e5c8483be27","sha1":"d647f85a2bd8e27d8d4febd2b685fc66c12dda21","sha256":"245b02fc2cfcae84628d98101ee5e7a6c0ebd8b090c081bb8d5185278f066851","sha512":"5beece05d41e237ebc0e23ee2ef687e8fc1d8e0e053d0be5b9b088b3c3c90d28734a80e49c8dee8c01517359ede55d0976030637c43e9fee3cfb81782f8d348c","ssdeep":"","tlshash":"8b51deaf54482cbdea356aa88049b16de4edf17b45d04c09c19a8d3eccf41e92978527","first_seen":"2026-09-18T04:39:46.104077Z","last_seen":"2026-09-18T04:39:46.104077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vagon.club/fonts/proxima-nova-900-italic.woff2","fqdn":"vagon.club","domain":"vagon.club","tld":"club"},"ip":{"addr":"172.67.167.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:52.365Z","timestamp":1789706332365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vagon.club","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 20:20:46 GMT","end":"Sun, 29 Nov 2026 21:19:17 GMT"},"fingerprint":{"sha1":"21:33:82:1A:C6:AD:8E:4B:21:96:6B:38:A8:61:84:C3:A5:2E:32:C2","sha256":"B7:2D:30:E7:39:A8:43:6D:18:7D:F7:7F:36:36:DD:E8:AC:8B:42:09:19:29:CD:B7:33:FC:03:7E:92:50:41:E8"}}},"request":{"raw":"GET /fonts/proxima-nova-900-italic.woff2 HTTP/1.1\r\nHost: vagon.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vagon.club/assets/index-8jGlR_b7.css\r\nCookie: __ddg8_=n7js3xi92AqS5OQY; __ddg10_=1789706332; __ddg9_=162.158.222.93; __ddg1_=PRMuCQ87Zb3DprwC9aVJ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=kIDrssSJurRimzEV; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\n__ddg9_=162.158.222.71; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RC5j53CnYVo%2FuPvDKssTSAM0N9LxojUF9ezRJlKIMZvPHDzZF81kM5g%2BcFGKpEYMS7WxAfqX2CbIoOgaqHGHPzfU3nav36KP0q9BbgTnJUaZx6UdcS6dYy38x%2BH\"}]}\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:38:52 GMT\r\netag: W/\"6aaa9bff-c4a8\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nage: 537\r\nddg-cache-status: HIT,MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncf-ray: a3cda9e14b3556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"kIDrssSJurRimzEV","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=kIDrssSJurRimzEV; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg10_","value":"1789706332","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706332; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"},{"name":"__ddg9_","value":"162.158.222.71","quoted":false,"path":"/","domain":".vagon.club","expires":"2026-09-18T04:58:52Z","raw_expires":"Fri, 18-Sep-2026 04:58:52 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.71; Domain=.vagon.club; Path=/; Expires=Fri, 18-Sep-2026 04:58:52 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50344,"size_decoded":51352,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50344, version 2.197","md5":"f4fc4456db374952bd5312eb09ef6eda","sha1":"47021971306ee29fb2e4fe84a40ddddf9518ebe9","sha256":"68ee3ef2f68828efc7582711c69682365bb4f5d5402a46497989a8f6ac055383","sha512":"81ed40a24b1f9120ee5e615049ea376eda8fb4a64d822ccf26dba83ac00d64e1794c26dcfa4329888586e3a4a9a22a81dec5282eb5750cca7f2b85a5b95fa731","ssdeep":"1536:j+K855ACjEl2cH6AG3QiZUX5nSNES2via:j+K85N4DHtiCXiXe","tlshash":"b333f1509f9e7cf3cbc21651aa0bc7d00ccd80bc5994e2c52bca58a70b1a9ac655f78b","first_seen":"2026-07-22T11:06:27.373852Z","last_seen":"2026-10-13T05:49:27.828623Z","times_seen":1692,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"104.21.8.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vagon.club/","date":"2026-09-18T04:38:53.180Z","timestamp":1789706333180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://vagon.club/\r\nContent-Length: 771\r\nOrigin: https://vagon.club\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":771,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"app_boot\",\"properties\":{\"__referrer\":\"\",\"domain\":\"vagon.club\",\"app\":\"client-new\",\"app_version\":\"05ec5587\",\"build_time\":\"2026-09-16T13:39:00.373Z\",\"is_pwa\":false,\"viewport_bucket\":\"lg\",\"dpr\":1,\"tz\":\"UTC\",\"sw_controlled\":true,\"route\":\"/\",\"lang\":\"en-US\",\"logged_in\":false,\"cashier_variant\":\"full\",\"ttfb_ms\":217,\"dns_ms\":5,\"tcp_ms\":17,\"tls_ms\":17,\"html_ms\":0,\"dom_interactive_ms\":409,\"dom_content_loaded_ms\":820,\"load_ms\":1721,\"fcp_ms\":815,\"app_shell_ms\":1274,\"entry_js_ms\":245,\"entry_js_kb\":898,\"entry_js_cached\":false,\"entry_js_protocol\":\"h3\",\"css_ms\":195,\"fonts_ms\":364,\"resources_count\":30,\"transfer_total_kb\":771,\"transfer_same_origin_kb\":759,\"cached_ratio\":0,\"nav_type\":\"navigate\",\"landing_route\":\"/\",\"__path\":\"https://vagon.club/\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=SFLKEH1hZYPCScRi; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg10_=1789706333; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT\n__ddg1_=ce7QWZEhRIQdisqiO4Pc; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 18 Sep 2026 04:38:53 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NNXlQzbvyKR%2FvgI2jbA8%2B9lQf8iWH3J3JL2xW42qlp5r2m3ELzTACbM9Zf17vbTmLfj4VRnmo0IgxiAR2uTXi%2FhL8O0gZvklPJh0nSFAlM9JmSgzD1eduM6K%2FxCcmVBB5CA\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3cda9e7dad4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"SFLKEH1hZYPCScRi","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=SFLKEH1hZYPCScRi; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg10_","value":"1789706333","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789706333; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg9_","value":"172.64.209.56","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:58:53Z","raw_expires":"Fri, 18-Sep-2026 04:58:53 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.56; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:58:53 GMT"},{"name":"__ddg1_","value":"ce7QWZEhRIQdisqiO4Pc","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:38:53Z","raw_expires":"Sat, 18-Sep-2027 04:38:53 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=ce7QWZEhRIQdisqiO4Pc; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:38:53 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1197,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6dead23d2cb9a6398da2374f0f924ab3","sha1":"3bdb10cdbfc55a6663ba786f8b98d14aaf9360f6","sha256":"cb247b8f6357239fa9e7fd125400dc7273558576f4f4306935c5c1f2bcc5eb89","sha512":"6cafe02945c339eaf058de437ae8b399d082c2c136d3a86e3c7ad674dcac036f28f988cd6fc3c87b7bca9ce15838f9bd6b5ab5415c24b74cfd8b30fea5aaf681","ssdeep":"","tlshash":"eaa012c011c048f90c1440043e540130787e810062b051d041f9c108065458059106a1","first_seen":"2026-09-18T04:26:23.188504Z","last_seen":"2026-09-18T04:39:46.106167Z","times_seen":12,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}