{"report_id":"b1daa4d1-3460-44f1-9292-2abd835ccac4","version":0,"status":"done","tags":[],"date":"2026-07-22T18:04:14Z","url":{"schema":"http","addr":"balaptotoplay.com","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":0,"asn":0,"as":"","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"balaptotoplay.com/","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"title":"BALAPTOTO | Platform Terpopuler Situs Online Bandar Toto 4D Terpercaya 2026","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"balaptotoplay.com","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":0,"asn":0,"as":"","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T18:04:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"balaptotoplay.com","ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-07-22T18:04:25.17937Z","last_seen":"2026-07-22T18:04:25.17937Z","alert_count":0,"request_count":97,"received_data":2224454,"sent_data":89855,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"myimagefell.com","ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-18","domain_rank":1920997,"first_seen":"2025-06-06T06:39:43.04448Z","last_seen":"2026-06-27T03:36:22.202618Z","alert_count":0,"request_count":24,"received_data":7812349,"sent_data":13485,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aksesbayar.com","ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-02","domain_rank":166177,"first_seen":"2019-12-14T17:56:10Z","last_seen":"2026-07-20T23:36:12.843554Z","alert_count":0,"request_count":3,"received_data":28481,"sent_data":1759,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-07-17T01:21:43.036095Z","alert_count":0,"request_count":56,"received_data":7873314,"sent_data":30592,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":10,"received_data":1041316,"sent_data":5274,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.chaport.com","ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-07-17T06:03:23.191484Z","alert_count":0,"request_count":2,"received_data":3029,"sent_data":982,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"landingsplash.xyz","ip":{"addr":"104.18.11.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-09","domain_rank":97769,"first_seen":"2016-04-22T01:18:08Z","last_seen":"2026-07-15T23:09:36.184831Z","alert_count":0,"request_count":2,"received_data":717,"sent_data":1140,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-07-20T07:49:24.133645Z","alert_count":0,"request_count":2,"received_data":1755,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":1,"received_data":323273,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"premicloud.net","ip":{"addr":"172.67.141.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":48055,"first_seen":"2025-04-16T14:37:33.865637Z","last_seen":"2026-07-18T10:21:42.286178Z","alert_count":0,"request_count":1,"received_data":96278,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-19T22:43:25.336158Z","alert_count":0,"request_count":6,"received_data":165058,"sent_data":3029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co.com","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"unknown","domain_rank":469940,"first_seen":"2023-08-10T14:30:45Z","last_seen":"2026-07-19T05:16:42.252037Z","alert_count":0,"request_count":4,"received_data":1098465,"sent_data":2263,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"shareservice.net","ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-07","domain_rank":67609,"first_seen":"2025-04-16T23:26:46.438114Z","last_seen":"2026-07-15T21:36:08.02131Z","alert_count":0,"request_count":3,"received_data":284691,"sent_data":1735,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-20T00:04:33.448739Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":9,"received_data":297298,"sent_data":5117,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.chaport.com","ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2026-07-18T21:14:32.235925Z","alert_count":0,"request_count":1,"received_data":84449,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"object-d001-cloud.cloudstoragesharingservice.com","ip":{"addr":"104.18.17.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":197194,"first_seen":"2023-06-28T19:31:32Z","last_seen":"2026-07-15T21:36:07.903214Z","alert_count":0,"request_count":3,"received_data":245420,"sent_data":1751,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/tweet-js/jquery.tweet.js?v=1","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"143845ca5f0a8ccaef7021490905e1eb","sha1":"ab220b9a56d58de5eee7b660c8375434ba3c9cf1","sha256":"9746885a2ade9e8a9f7e2ce72571e94e62f340c827551c1ddef77f96b059aa6d","sha512":"14ae629bc36ab5892d1a45ccaa8ee795306268a548d1c2275bfc34cb057680f474c4e8958bea6904af69ddd5efa7fa5aac23e16e9daa88c449bd6734064203d4","ssdeep":"192:HXy92V9DWURQtBRe7A0QCFwzm4GwYVbBoqKIfAx0qlpAV/B/OwyZU72W2KllyLQ8:HXI2ibe7A0dHKF05yZjW28laQgR","tlshash":"7152e8e4f38d212b4ba231559a2e72c4633ce53786d0cc77bdae915c2bd5a2ac3314d2","size":13830,"data":"","first_seen":"2023-03-12T09:35:28Z","last_seen":"2026-07-23T08:12:22.106881Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery.cycle2.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","size":22288,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.184667Z","times_seen":2681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/custom/floating_icons.min.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a98ce3cc0446331f3be2fa285d3de43","sha1":"c7093d7879779e4ea90d166adfb697771dc40f20","sha256":"e62de32d75978daf1f860fd48099199c6e7851c59c6fef00fbef538c68a795e3","sha512":"7026fcda1088bb411cacd32ff0fd00f536533c649f5d9682215a78cca817561744801b1a6613b0ac9205033378d81f67a4734daf84e1cd2b6c7026f4002c71f7","ssdeep":"","tlshash":"b94174a17596a33443d5015be5bb472070201909798689c0f6acba7b173be495c22eef","size":2387,"data":"","first_seen":"2026-06-11T19:18:27.202513Z","last_seen":"2026-07-23T08:12:22.196317Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-23T12:45:23.408904Z","times_seen":181486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","size":1462,"data":"","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-07-23T08:12:22.183992Z","times_seen":2463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery.fixedheadertable.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","size":10635,"data":"","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-07-23T08:12:22.195056Z","times_seen":2461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdfdb5315e3d3cc7597290858f290632","sha1":"1819074247ee4c3cf4316ac273bc96cdb3b05287","sha256":"8267d8ffa4674b2170a79f069a738f154d2f92af843b45cb8df89e82fc301e9f","sha512":"ad7ad7f7140a882eabd25d7407e140c733384f0a94da5a7c2a24abbf0c355a84e2c4c80b19502a78bfb49e30370ea3087dc01d0a42cd1cf8ee70977ef01f5312","ssdeep":"","tlshash":"90d023791975893055d8015a50fde3d43671309077e39504c1dccc1f5e21dd318f259c","size":217,"data":"","first_seen":"2026-07-22T18:04:38.944319Z","last_seen":"2026-07-22T18:04:38.944319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.twitter.com/widgets.js","fqdn":"platform.twitter.com","domain":"twitter.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"44eadd30caaa53e4629d4f7c82454f2f","sha1":"7e477f433dce809bb34153e37bbb525434616715","sha256":"cee8c177d918a93cdb029c7616478f4a5ca2585c7b4f8115a597dbc326c9822b","sha512":"5d4377070e33c64d4d4e1fd8ccfb0dce0af68e1ebcc46768bd4362b8dfe096a2471b937e3efc1b345ed65ce91edf8d540278ea8554349e1e242dcc6f13bcf79a","ssdeep":"","tlshash":"5ed0951e244473240650df01f7639541d30708f815d091f4d07494e84b0b825a4f6fdd","size":247,"data":"","first_seen":"2023-09-02T17:04:56Z","last_seen":"2026-07-23T12:33:44.486643Z","times_seen":4101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-07-23T07:12:05.387351Z","times_seen":1691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=66c6a27d7ab48068240f5e2a","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac06bdf291cf0b64fae31949085ed9f","sha1":"8e1662c478f515b42dd5de84bfb7f442d31fcd69","sha256":"5175093825e4366ceb6ae1b34eccdd858ec2f009dd9be8451883570d953dbff5","sha512":"53ea2ae4ca33ba8cdb0eeeef050f3b035d1b1e5a1712622c08ccd64b4d77673548c125f0f260efc6a71b527f58590e3704eb51fde4adb4fb31430a6d4304d6ef","ssdeep":"","tlshash":"bce02b42eb250f129b603675a90a1bc668afc3574b40d9a9a871ee14601ac915064c7e","size":383,"data":"","first_seen":"2026-07-03T14:18:17.182179Z","last_seen":"2026-07-22T18:04:42.40393Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksesbayar.com/wl/idn-iframe.js?_=1784743418301","fqdn":"aksesbayar.com","domain":"aksesbayar.com","tld":"com"},"ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00d4b93665fca490c742c58a58f380fe","sha1":"7b8763a54c22ad9aded68f96ff7347058f9f562b","sha256":"59da065ecb2951b938d1fa36e72e60628e19823b58485869c4cdc4f357b0fe0a","sha512":"c37b5da17ee78039f9620e9990dcf05d4e1aaa6aa59820dca403ff5a7f7fcdb0f3407a31497da971b5d89cf46479922a99b3d8d7339a5aab29fd745876d3cbc7","ssdeep":"192:cerMx8yeVwYHn+Ziz6i/1KeL0ZE19g3ptzqHaax7H:FME+Ziei/RaGd","tlshash":"8d12534b20b720366137207e2fdf6045b9b0941b3205dd687dac87486f85d3ad7967ee","size":9768,"data":"","first_seen":"2026-04-11T07:58:36.378772Z","last_seen":"2026-07-22T18:04:42.328964Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","size":7420,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.155687Z","times_seen":2697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/style.js?v=1.0","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","size":5854,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.136874Z","times_seen":2486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.countdown/2.2.0/jquery.countdown.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d3ff3c3fbaa67cc639501f44eeb07be","sha1":"bd66e4cd58de09c198e7abc77fa4c883955d189e","sha256":"2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f","sha512":"96d7ae443f9a50436b64f4d758544f4c17030f120659ee6ebb46a93c49fedd92980f00da104ac82bdaef474433506994439e4a144d91a864d5a19b0a72d18c57","ssdeep":"96:kbG5QHArNbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qD2O:fQH+UpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"71b1c6ceb3b213d5089553b101ae1506613bf25be4e6001cb5fceac87a65c5d607fd78","size":5339,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T09:21:25.70852Z","times_seen":10991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"4250000030000000003000000c03c030000000000000000000003c003000f00000c000","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-07-23T08:12:22.200817Z","times_seen":14441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a753de0369d13becc9649fc48f55535","sha1":"e324063c8f46c6b29427df1542f1026ad230f604","sha256":"423217abf8775cea2dc30fa1fe3e1c5e24dc359a80f1c37ad29a86094bfe81d1","sha512":"eebbac93c9063c5ca7656bb6e8e29b4de23e40fa18721b71b263de06a9072045c9c5eba7e3227821261eec2eaccfdc1dc5e1351a4dd5c6c21680265373ebd7de","ssdeep":"768:dGDfR+ohTVSwU7NUgu7MTCm0BKSHIBOiAAcFcQZI20xIl6jnV3jRvNXBc:dSfRFWw1JHumVZYxdVnXBc","tlshash":"8053740672a4f472059fe466803b090bb7362c9de446b16cbadd98dd1f7cd483267b3a","size":62563,"data":"","first_seen":"2023-03-08T06:42:25Z","last_seen":"2026-07-22T21:04:09.714336Z","times_seen":6375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","size":12360,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.116515Z","times_seen":2701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/qrious/4.0.2/qrious.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea58889c516e953d6e78ca4834f834c4","sha1":"a9271e81e2ac6a692b1c133811afa33f0f3d7dc5","sha256":"db99dcaf40a926181bce4522477c2efc5924f6c4b29111b6a97faea477c9528b","sha512":"a54840a5542d2db9e92ed267e83bb30c3e68db1b662c99c9ee806832c067cce915929aa87c62c63da049e9ac83db341ede50a00a26e12418b8723e70031c1528","ssdeep":"384:jHHJOCXOLl8aRuhBhp+zlwcqiI12m8jtT:jcLqaRAQzlvmA","tlshash":"25829595b3a1956a639a2ad50c3f244f42f2e4593418419cfbb2c9dfbd3c4c96039f3a","size":17579,"data":"","first_seen":"2023-03-09T22:04:46Z","last_seen":"2026-07-22T18:04:38.835121Z","times_seen":1103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T12:29:34.696329Z","times_seen":493398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","size":31650,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.103987Z","times_seen":2815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b47be60a9205427afaa3db67511ed3a","sha1":"13aba22e343283634526ffa15ffb2ec1e770502b","sha256":"4b15578d1c420a58c1c41c4a88728a887af2540cedcd064f058f92b64299d677","sha512":"7493fe9f50f66a520da4224a3514ee9f8030fae1d79708d17be392c168604c530cf7551f4d8d56659e6d3d59844f053e5b48bfc788962e2f1babc627a54a9d77","ssdeep":"1536:a6VmkhM1hDaYGcvezlk5c6w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5HKp5ffL","tlshash":"898329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","size":83491,"data":"","first_seen":"2026-01-15T11:14:47.62677Z","last_seen":"2026-07-23T07:12:05.409097Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54cdb604e88d3093ff6309ffdff93a6a","sha1":"fb023b1b8b3dd5c3a5822d56c63119d19faa0c14","sha256":"9fe1425df909edc1264eaabb2746b21fcdc05f124e1e45515031a19e7a97baef","sha512":"8c6561814787a33709425d92d78fcb4300755e8b9b7bf0b061e3a6724586ab67fe94739ad1e71864e857aba873985f41d49784eb4f739c4018a3c84dca9ba78c","ssdeep":"","tlshash":"60e0202a50f18652967640cbf4175155f451013e540cd940d1c8cc7fad68c9530fa754","size":356,"data":"","first_seen":"2025-04-08T04:25:33.720822Z","last_seen":"2026-07-23T08:12:22.138207Z","times_seen":1400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-23T12:41:24.697998Z","times_seen":108445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"eval","is_inline":false,"md5":"129f5fd162665cd0abc0f39fea8c9e8f","sha1":"253c21387dc8055cee42777276f455c7794de3cf","sha256":"a6336811b695da7dff581c054bbcb90502e899d034ec0f26005f91236c3817b1","sha512":"c6017466dbe4147b237b174c099b386869ee7adf1c41bb7a46df29febd2ae551d7059c590b4cdd76248b7414262ce0c856deeb174e6ccdc8a45dc9d820d505a0","ssdeep":"384:jpWcj41o2t8Z75jf5E1vcNTTCD2c5cDgk:NWcj41m7av8fCD2wk","tlshash":"d0b2a5523250233482e332fe55af510d763afb74ad428169b06285eb366754ed273f3e","size":24154,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-07-23T08:12:22.200188Z","times_seen":5062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/vbulletin_md5.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","size":5689,"data":"","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-07-23T08:12:22.127833Z","times_seen":2518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/auth/login.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","size":108139,"data":"","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-07-23T08:12:22.125447Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/appear/jquery.appear.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","size":1552,"data":"","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-07-23T08:12:22.194364Z","times_seen":2711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","size":941,"data":"","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-07-23T08:12:22.122402Z","times_seen":2499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/plentz/jquery-maskmoney@master/dist/jquery.maskMoney.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1cc0aa647ec24abc3b39e93ec7acc12","sha1":"99a5cbbb8c175f16bf34ad37d65fbbda2f88723e","sha256":"1ed9cb1aef4522e2f5e0d67a387caf52e2101e1c58d94f113d9293e24581641e","sha512":"756d27c14865ea5181b0f76f724fb73701abbd7d8170d625c8b5d69b310fcd28ff7d09a71f28c3f5e7993da8c9504e45f467fa3a869523afb643ebc924cbbd7f","ssdeep":"96:2qQot/er6dNd1dzdVdCOdh5z1/ahxdZEF1ESlvphRF75TtVQXIK0dO6kO:2q1/erQzLZrCkh5oK1/vdhuXIn9kO","tlshash":"04e1a5acb16132eb57b721e650ef0312a2331b8828955080f106fdd27d74fd64377e6a","size":7029,"data":"","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-07-22T23:22:13.287086Z","times_seen":645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/message.js","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29da031a392133c73150b178e639f3b1","sha1":"dfd6f1ffce6c69207efa10cc1a79c7eb24c93361","sha256":"19bc4488d6b4626afccf834536c48940eb0178c63a5b469cbee6c54140e43f95","sha512":"5af312d8a797cc2d17f58914784d0d3710c29deddeaf30904ab95ef140b28b46fad58b6700acbe7cd9305c8c4edd662b2d6e07de0b5fb5faea873fa2319c6252","ssdeep":"192:EOf7/FOGZSlogwJa8XVDaYXC8R1DRWpiItZxGBwRa2WKMaRK+IWa1Z0iOZye2gT5:zGXwBXY8lR1VW4Z+RpjKHF0tY6sFdQJ","tlshash":"70920be0ed4359d792c75aafe2b7e3c9f956ec3eb4840c0794017e1052a6129afe1732","size":19632,"data":"","first_seen":"2025-06-08T10:54:51.892732Z","last_seen":"2026-07-22T18:04:42.184155Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","size":3568,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.18049Z","times_seen":2459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","size":18450,"data":"","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.199218Z","times_seen":2704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","size":1002,"data":"","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.104664Z","times_seen":2456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/frontend/desktop/template_v1/before/index.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","size":12408,"data":"","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-07-23T08:12:22.182256Z","times_seen":2144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery-2.2.4.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85577,"data":"","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-07-23T08:12:22.119841Z","times_seen":9087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","size":14916,"data":"","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-07-23T08:12:22.097432Z","times_seen":4084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","fqdn":"aksesbayar.com","domain":"aksesbayar.com","tld":"com"},"ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65d29c756f2cd4687f92989093c0093e","sha1":"7525bc6b9263c3f1e96c985a7392b40485b41a09","sha256":"46df06fa13ef52500711333b2da8e17762f9a4456af6dd46690fc332bdffbb5f","sha512":"b57921509c5ef640c9f8248e1f866c160a6b409628a8bb78b31484257309980078ba1a65fb435ab28af90efb1a4836a1e6611d262f8bf81c4713253eea149841","ssdeep":"192:shcxpZHOVPcJILL6TaaSDmspT97aTe2gIdY:sSboVUDI7r","tlshash":"3c22531efab612a0543320388f9fa1053d66960f4a46ed647f9c47e43f8d92ed062b8c","size":10077,"data":"","first_seen":"2026-07-22T18:04:38.946693Z","last_seen":"2026-07-22T18:04:38.946693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/custom/quick_menus.min.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7317959829252a5b6ec0bfa7e8fd1cd7","sha1":"adeea8e64f82c0c5bf31cae7573fb2da2dd9379f","sha256":"a1dd4aeb77f3316b4e815fa2bc28fe65dd008f74e59cd6b3f2ed9f179874bdc1","sha512":"c8598cd7dab477a0e712a6b0b8aa87e901db9c9a46beee7c7657091d453e88cbac6b1c8e8da419de697208aa3c35bc9376205200b955a86a884b7c02bade5641","ssdeep":"192:nBggLQBa/19nBvb0ywD5UAL5H+L6FNrn5IAgyJP/:nhoBNrn6pyd","tlshash":"7c22735b3ed200355a0baf9d67f98746376c7580c932c2793fcc520b5349da9c9a1bac","size":10588,"data":"","first_seen":"2026-01-21T20:11:17.205842Z","last_seen":"2026-07-23T08:12:22.19713Z","times_seen":958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d8d5604336e419fe07a20019ef31c75","sha1":"04c2b0493074f8562f2919f799863ab002959e20","sha256":"d3b7428acc3e8284652a8f2c1e285403a475d14e8f84cd4ee80433c8b2b12e7a","sha512":"6e317a70b64682a884f2e7ef122b7bf4ac06fabc7c26d2a645d602efa306dc19870f924fa75e9f77c94ae3f58d1cafa85656872f61c77d3740ceff680c34d2ac","ssdeep":"384:UZJaHnAF3V7mvtD9laOU1r8ZhR7wqWxbC7EW4c2HqIMmRRwa:I8nAF3WDPaOULqSRKIM+Rwa","tlshash":"9fa2d986b4c5f90413d27134103b36ef726ebcc866198648c1d48afc7db2bda9f66d49","size":21319,"data":"","first_seen":"2026-07-22T17:40:16.901191Z","last_seen":"2026-07-22T18:08:43.938851Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NG7PRSSV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abbe37380349f062efd214e1ffb5d8f9","sha1":"c7820d50b4d5a734e5abdb0c309791a7f308c66d","sha256":"9de9f796b274cfe14679d85f82343d0ad9fe8e0b7df8c40ebef4b6d757421a6d","sha512":"b7dcc065abd61cdd31f0a69dc33c9a35f7deb30bb06a59813eff9f9ce17b47f65c46b4bc6187f524067d2eef5a77e183e4e8e9703171e4b28ffd5cb7b7f604dc","ssdeep":"3072:t2UM7pyNzfV01tL1016I7YtdtrNhRycUF2DXAhouVTWQUceBz9d0C3TnpTMK059H:spyc1J/I0tflx0VT+cMz9d0C3Tnpyzbr","tlshash":"6d64f8ccb3d6746283a3a478503f014ba23a79d1f84cd898f186d9d42e746698277f7d","size":322669,"data":"","first_seen":"2026-07-22T18:04:38.925714Z","last_seen":"2026-07-22T18:04:42.212115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[cycle2] --c2 init--","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"log","text":"[cycle2] next: .nextControl (string)","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"log","text":"[cycle2] prev: .prevControl (string)","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"log","text":"[cycle2] slides: \u003e div (string)","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"log","text":"[cycle2] timeout: 3000 (number)","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"log","text":"[cycle2] fx: scrollVert (string)","filename":"https://balaptotoplay.com/assets/js/jquery.cycle2.min.js","line_number":1,"column_number":8733},{"level":"warn","text":"Twitter embed placeholder is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1901602 for details.","filename":"moz-extension://9a310967-e580-48bf-b3e8-4eafebbc122d/lib/shim_messaging_helper.js","line_number":23,"column_number":15},{"level":"log","text":"Detected partner id: 5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":224,"column_number":17},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19},{"level":"log","text":"posting ready","filename":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","line_number":489,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"premicloud.net/banner/image/promotion/SlideBannerHomepage840480.webp","fqdn":"premicloud.net","domain":"premicloud.net","tld":"net"},"ip":{"addr":"172.67.141.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.288Z","timestamp":1784743418288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"premicloud.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 18:50:27 GMT","end":"Tue, 25 Aug 2026 19:48:33 GMT"},"fingerprint":{"sha1":"71:7D:9F:8F:21:AF:28:10:32:0D:E1:0F:C0:F9:FC:BB:EA:3D:65:83","sha256":"4A:A5:14:DA:99:D1:37:67:2C:9F:FA:38:0D:13:CA:00:B2:AE:D1:99:8F:84:89:FF:F4:8E:7D:DC:43:75:F6:78"}}},"request":{"raw":"GET /banner/image/promotion/SlideBannerHomepage840480.webp HTTP/1.1\r\nHost: premicloud.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 95570\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 27 Oct 2025 05:38:02 GMT\r\netag: \"68ff053a-17552\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfxmhaPS5PEdipTsHJcf%2B4PC2qa4wvLu77W580Ct2Ddy1AYXdZUGBgz3BfkA8JlwCWZ6ybiJb1WM3Q1DICQwlhKLr0lUPf2DHwFI0iJsff1u5dx3GNLibTUBHwDgrd1wRA%3D%3D\"}]}\r\nage: 5460\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\ncf-ray: a1f45cfca9f20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95570,"size_decoded":96278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a8bb2a190e0c6d1c074ae915eb26753","sha1":"6a213a52a08257034db6d1865642f6c104fea723","sha256":"f900ae3967910039c7a5fb9187b1ba9ce374bc20c1c9ef6021fc7773dd5ce436","sha512":"e90273eba3b54a5d1c72f8bccdb135fd6f222fa90395c2fbf8e963de9d22f5b01ca776be8c88b8b720480ee267ae479409d4ada6bd03ba2d6415f8d52ca70c2c","ssdeep":"1536:79RZLbhBERVfH8jVUYZ1nAWQy1EqHq6RumHQ6tVHAYZv2hM9lasU7lxMjdby6YgJ:79LLbURVf8foXyPFjPHAkv2h717rmzYc","tlshash":"789302208b026ac5b4f4c0f5afc69d33c60ed6dbf4ba31806a565527ca60ea91f72d25","first_seen":"2025-11-04T19:21:06.49855Z","last_seen":"2026-07-22T22:49:40.959375Z","times_seen":984,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":6,"connect":5,"send":0,"wait":8,"receive":3,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bankjago.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.339Z","timestamp":1784743418339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bankjago.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1927\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-787\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcaca74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1927,"size_decoded":2328,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit colormap, non-interlaced","md5":"762ad8c7d55a59ab72aaefe6e252688f","sha1":"5a5cbec375d9e898e08ab351cdfee78faf2e56eb","sha256":"af79d64e86faafdd56c113838f3b03ee84c26719658a12db6c31ba18a3831135","sha512":"f89797d67462ec548e52c7b1c6cdcf4b12dd71e602f00f649490739069619d3ffecd7f34ad91baff4f955389300b76615a71a827394ed9c4f5b9fdb23106242a","ssdeep":"","tlshash":"df410cd6676f4ca7f02c8af6a5162cf2d513c12e1381cc098db1ad9dc38d18c79681f0","first_seen":"2024-08-19T03:13:12Z","last_seen":"2026-07-22T22:49:40.679755Z","times_seen":733,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bank%20neo.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.341Z","timestamp":1784743418341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bank%20neo.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 109712\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-1ac90\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacaa4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109712,"size_decoded":110117,"mime_type":"image/png","magic":"PNG image data, 3857 x 2190, 8-bit/color RGBA, non-interlaced","md5":"fa6e0017b03c76607d84638332ce1f41","sha1":"bae9f02857e027167b128b23e95fed4c04734ef8","sha256":"f4556c58d5797d6ee448f19bf5abe27ed3f2502cf227e5a1b6e22cdfb9c59fe7","sha512":"4a8b36e4c701df107acec0d427e67466eb2699ed35ac79c199702faaad12433b2a9e64d30c5f0b4a0c3674250d7b76a0f1910fc836f78c5a33ea66501d618315","ssdeep":"1536:ZpOvbD321Sr0NpQELpPqF1ok4+3ODTaBNT/IBr:Z4bDGc0XNP6TfBBId","tlshash":"e5b3aebd5f36f177e98809308ced3eed3e51085422a527aa63b2ad617d834b4316dc6c","first_seen":"2024-01-21T12:23:40Z","last_seen":"2026-07-22T22:49:40.67375Z","times_seen":373,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/GATOT-KACA.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.840Z","timestamp":1784743418840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/GATOT-KACA.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"5a1b41e54a87449f61d503a6cc40cab2\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDB14D3D3\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acX1wMdaUebAaO83YBFcjc4qgRStOy%2BXYeEZg5D3fYqGKXQ0JxzH9NbyZp%2B01SPbfZlWNF9w4R2WrTHy8XlvYlUtt9IgF3tTPKb3aTQt66%2FLlZdYtxxf0RicraBGsqxDbTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffbeda5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45623\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45623,"size_decoded":46691,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"5a1b41e54a87449f61d503a6cc40cab2","sha1":"4069df466a0f821fb1a556de7964853f38ddf4d3","sha256":"08b168cc14b796b8e45750f7e3980a0f29f2c586b50e06567e5414a3b9522a15","sha512":"f1ab794d2bdde7748de33700a2432a5583e16956c73892d022bba74441b4719999cb046c223103253f2538487271188c8ae33aa646555037712f50a3bcadb58c","ssdeep":"768:5NBhOS5N1Enmd0Xmgo/y0YEstL6HOuD62W7VWMvntOz90CGreSjuVj3W2QM+EW:53hO+O0/y3NQOuuXcMvntOz90CGreS+A","tlshash":"8323f21aebc27853b783c1c0126e98237c1d8de40819de5c2ce9a21ffab47470b9567c","first_seen":"2025-03-01T20:39:52.199296Z","last_seen":"2026-07-22T18:04:42.107975Z","times_seen":48,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/SWEET-BONANZA.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.849Z","timestamp":1784743418849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/SWEET-BONANZA.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"9abf1a86b399197ecd86d217eb9a868f\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDA848D71\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlORUk8CqIufAEXDqEomlOPMbQUFZfKgrL6xNq6P%2FEc748KKqi2IzeuQQkSA1Xja00H9negEWtaHxSmr3Njl49%2BA6QE17UmSoI9MWh4R6llOJgOJV%2Bhe04FCGVlgrU6Yqdk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42890\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42890,"size_decoded":43958,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"9abf1a86b399197ecd86d217eb9a868f","sha1":"eb4418c65a5586d0307e9e4c8a39cba8d78959fe","sha256":"7e595161bb7474f097aeb98966a1f96f22029abe6346cf224a252a3b9f575f3e","sha512":"f1dfd5f8fc31715d091f80073d93681208c1a9050b6168a478234a9e73e2f2c12b0061a93568625dc6e83758fbc379439f47b8f2b1e99197ca8115f6e9e0b72c","ssdeep":"768:w+OSA8Nliv7elwvIceRZ9ll/Iq9Ne+KcGf9chTj/PVKF9WX42Se57Gf7riUKXi9:w+OSNMDwr3l/nNeGFRjHkFkX6Czi9","tlshash":"2f130279f6419ab141a48fe3797cd68e69f012f81fb5fb9013a9425e0390f80d50fe82","first_seen":"2025-03-01T20:39:52.080761Z","last_seen":"2026-07-22T18:04:42.32614Z","times_seen":52,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/tweet-js/jquery.tweet.js?v=1","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.191Z","timestamp":1784743418191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/tweet-js/jquery.tweet.js?v=1 HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Jun 2026 11:12:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a32812d-3606\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfba9004e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13830,"size_decoded":5287,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"143845ca5f0a8ccaef7021490905e1eb","sha1":"ab220b9a56d58de5eee7b660c8375434ba3c9cf1","sha256":"9746885a2ade9e8a9f7e2ce72571e94e62f340c827551c1ddef77f96b059aa6d","sha512":"14ae629bc36ab5892d1a45ccaa8ee795306268a548d1c2275bfc34cb057680f474c4e8958bea6904af69ddd5efa7fa5aac23e16e9daa88c449bd6734064203d4","ssdeep":"192:HXy92V9DWURQtBRe7A0QCFwzm4GwYVbBoqKIfAx0qlpAV/B/OwyZU72W2KllyLQ8:HXI2ibe7A0dHKF05yZjW28laQgR","tlshash":"7152e8e4f38d212b4ba231559a2e72c4633ce53786d0cc77bdae915c2bd5a2ac3314d2","first_seen":"2023-03-12T09:35:28Z","last_seen":"2026-07-23T08:12:22.106881Z","times_seen":297,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery.fixedheadertable.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.205Z","timestamp":1784743418205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/jquery.fixedheadertable.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-298b\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc9574e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10635,"size_decoded":3679,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10207)","md5":"406edd97a8850446d2693ef306af0708","sha1":"bd4996afdab1f18893ef89c3281c55e6585f334e","sha256":"991994866beb5e90d2205f4c5d4a757ddd38c6399386335991b260a89d857fa1","sha512":"493f04e96c9ead6dd640cc2a8c53e4aa3b43171c7dd51a4eabfce9fbcf00c51fd9d2edb1be40e6dac6ab6f3850b53234f177bd232404ce70ff287c11735f7d8c","ssdeep":"192:J/PBMlQxEuOaOGWzw32xilOXrPN7pOIN+5Mfj9SPHwjwTuv0vS2QeON:JBMlQxEuOaOGWzGEZrPNdh05NPw+S2sN","tlshash":"9b227195b3f93192c5fb61ba59fe014db0214d37a74b44b0b1aec1b81e70d8d22b9e2d","first_seen":"2023-03-07T23:34:28Z","last_seen":"2026-07-23T08:12:22.195056Z","times_seen":2461,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/sinarmas.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.337Z","timestamp":1784743418337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/sinarmas.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 3215\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-c8f\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcaca14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3215,"size_decoded":3616,"mime_type":"image/png","magic":"PNG image data, 96 x 23, 8-bit/color RGBA, non-interlaced","md5":"73d053c5421d651ab7a55b80a0c3124e","sha1":"4292564eb27a6a8ac74e6e8a2dca08ab6bf1aeda","sha256":"e16b358ac0d98e0eae590a78af0f4da1616b96f54ee57bb1d498505e2a104134","sha512":"69ce6496937596e2a005259b29a217174d8c7e7dcb2795f1ec384b60e7770647ac23e16b8e9d999e3d866b3bea1a941eed974c67b4f95d315ef6bec45db152cf","ssdeep":"","tlshash":"23615a955ec3da55a0c0b635b82d792024d869027c2d0ecee51ce309933beb3ba4a75b","first_seen":"2023-05-09T14:48:56Z","last_seen":"2026-07-22T22:49:40.862354Z","times_seen":817,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/banner-04.jpg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.826Z","timestamp":1784743418826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/banner-04.jpg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"6290ad45dc61fcdd9296a3f2f44fc4b1\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0A66AC369\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwpG7bTsj%2BSNpuHmd8Wi85JwvvMj3iXCU3MRrjTaGji9vMgI%2FRQSnVq0aVCbY1j6VblrmrcibaW9PniIMoa4zRYtjV03gyjEK9G51ywSbXDh7Afe1HFw6SrgBp1eHgIi2gw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffaed05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":94144,"size_decoded":95211,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 640x366, components 3","md5":"6290ad45dc61fcdd9296a3f2f44fc4b1","sha1":"9c623e8657488176e506b1e9756101cdce46f27d","sha256":"8a7cd77c10d53581817c5f4844b3207fb8493107c931a6ea0c03bb662ee43bff","sha512":"42fc784dccd325f4b7a3f460e1421573e14b9e62902857688fd23912b3fe6abe3f277545b2afa890cda289c91945718ebf490f58e2ca0675020fc48180174b3a","ssdeep":"1536:RMBhigFSNFu7B5GGDz79REdaTjaTDvrFDmCNpcH72HkxKyRvUAZp6y1:RMKqSO7B57H79Kd9DBNpcHtxFUAZp6y1","tlshash":"5d9312c9afc4ad5af1f3c7b814e17189c0ee3ac8a5c585cb91d0d734cbc589468ec966","first_seen":"2025-10-30T11:45:25.875687Z","last_seen":"2026-07-22T18:04:42.327157Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/tabdrop/css/tabdrop.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.116Z","timestamp":1784743418116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/tabdrop/css/tabdrop.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\ncf-cache-status: HIT\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nage: 0\r\netag: W/\"6466f3b1-cf\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f3e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":559,"mime_type":"text/css","magic":"ASCII text","md5":"5c0a4a2c86225279696ea35c79bc4662","sha1":"226b8a270b730dc13f15e83a1c22a176a34e5d97","sha256":"89e825818fc01c1089ec415c0619dc547020f8a0af119471ed2cdb5edc2b614c","sha512":"494b77604377a26ed09b7f3f7ccd9d433ac85a8e45979d0bfbc710c80ccb9f327e09daebe38772952862ceaffa290f8ebd9b34a898b3bfcf6c38901355b7ea08","ssdeep":"","tlshash":"48d02349179565874785577f7d3b85cb412ef145f44f019dd1054670c44484b3095d85","first_seen":"2023-11-04T12:19:53Z","last_seen":"2026-07-23T08:12:22.18621Z","times_seen":1123,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/nivo-lightbox/css/nivo-lightbox.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.125Z","timestamp":1784743418125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/nivo-lightbox.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-121b\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb4f784e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4635,"size_decoded":1261,"mime_type":"text/css","magic":"ASCII text, with very long lines (343)","md5":"a47f8f8621ed29c2a25f14ef08ae4a6d","sha1":"a4148e7fb99f60c0d37a787f2aeb5a98f8ab9310","sha256":"4ffdcb40550fad3fd4bfa401637be283e8e5b2738fa4b8745a8d3d5fa2d42425","sha512":"49ecc0ae0303474b285ab26be003fe743203437d8f756b5273366ea219b2344fb1624d02c018bd1c62bea95c327c4ab8a9ba2e24f8556dd53567f0fd8e0ba0d2","ssdeep":"96:6QUcgp466oHNUcg/SVK98qRlNmNtNzLcaNnTYXiN92bdxJ:cp466biqr4DZXC","tlshash":"22a1071b2702104880fab216a2c4cb781f3cc20bb8626caf7386d51b6acb5dd5d57ed7","first_seen":"2024-08-20T10:52:52.92478Z","last_seen":"2026-07-23T08:12:22.154915Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-roulette.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.313Z","timestamp":1784743418313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-roulette.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5961\r\nlast-modified: Tue, 26 Mar 2024 08:45:04 GMT\r\netag: \"66028b10-1749\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c294e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5961,"size_decoded":6364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"4c00c62f6892b38be72ff21ba77bcd4f","sha1":"cd3e7855bd7252fca7ee624819769b219e62afa9","sha256":"df04e5456a26d89d36120c6078dadfb6e84b37b635c5b8f75a1ac75c27e1fc41","sha512":"b143dab0190dcd15de7220ee69def82732824d01f60d6428abf03d772b6440ec01d85bcbbed4d95209ea157d3781d892bb62502ba29f6624fa33c463ad78145b","ssdeep":"96:dGyZjfHeWJzRdWClke5tzFNN3CEBqm0SIlzE47ge6+u1qlTc/7jz7Gs:dGyZjNJldWClkM18fm031EhUczjz3","tlshash":"18c17e611b7d5036cdba10f1cb66b21abe0e5f8029c54eb54d3936499cecb7244f906f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.707321Z","times_seen":2041,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","fqdn":"aksesbayar.com","domain":"aksesbayar.com","tld":"com"},"ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.342Z","timestamp":1784743418342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aksesbayar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 07:19:43 GMT","end":"Sat, 05 Sep 2026 08:19:28 GMT"},"fingerprint":{"sha1":"4B:9F:02:CC:FC:DC:68:FF:73:EF:02:59:A8:F0:7D:E4:50:B5:85:EF","sha256":"BA:22:0B:6F:24:BA:99:7A:56:44:74:3F:DF:1E:2A:B1:23:EB:35:1F:5B:B6:D1:E7:D3:15:EF:05:6B:7A:76:F8"}}},"request":{"raw":"GET /wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8 HTTP/1.1\r\nHost: aksesbayar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: undefined\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 20 Sep 2025 18:22:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQnAP1gUYEbyhDZEv7UAIb7b%2F13Q%2BrLR%2FUjI%2Fd2WFX5Qyi%2F5KwcwjD3lG3BXmL99HPhirAOWrCbxG6qs9rL3qpVr4yeeMjnbzz4dkg8zQslBAkeJRTGcHgZWCndiJlnk\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a1f45cfcc9ae56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.6.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":16364,"size_decoded":4558,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"1ee681df880c90eae60db3188a873a43","sha1":"67cf36c7015764d03c946ddc886864b096722b0a","sha256":"32380724479d5a6d68bbe97fa0a55d89fe12a8a23b34b02511e75a18dbeddb78","sha512":"941f0fbd564e2fbbfd1188ad776ab83ae4ade28f9bb2ac575b5a435b70ee7b3f20fdbaeef1692143f262cca8f718e1fc006f3d58a5412011d4145ecf239cc7ce","ssdeep":"192:5rAboaJrFpPhPMjoeLnunVWnlElhcxpZHOVPcJILL6TaaSDmspT97aTe2gIdiW:5MFpZIjcSl4SboVUDI7y","tlshash":"a9728709e9f606a0243310785fab62093d65d60b8a46ed5c7fdc53e42f8fd6ad46378c","first_seen":"2026-07-22T18:04:38.782165Z","last_seen":"2026-07-22T18:04:38.782165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":615,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/custom/quick_menus.min.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.214Z","timestamp":1784743418214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/custom/quick_menus.min.js?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Jan 2026 09:39:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696f4d69-295c\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc9864e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10588,"size_decoded":3288,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10588), with no line terminators","md5":"7317959829252a5b6ec0bfa7e8fd1cd7","sha1":"adeea8e64f82c0c5bf31cae7573fb2da2dd9379f","sha256":"a1dd4aeb77f3316b4e815fa2bc28fe65dd008f74e59cd6b3f2ed9f179874bdc1","sha512":"c8598cd7dab477a0e712a6b0b8aa87e901db9c9a46beee7c7657091d453e88cbac6b1c8e8da419de697208aa3c35bc9376205200b955a86a884b7c02bade5641","ssdeep":"192:nBggLQBa/19nBvb0ywD5UAL5H+L6FNrn5IAgyJP/:nhoBNrn6pyd","tlshash":"7c22735b3ed200355a0baf9d67f98746376c7580c932c2793fcc520b5349da9c9a1bac","first_seen":"2026-01-21T20:11:17.205842Z","last_seen":"2026-07-23T08:12:22.19713Z","times_seen":958,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/MAHJONG-WAYS.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.846Z","timestamp":1784743418846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/MAHJONG-WAYS.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"234ceaebd32e1740812727a5f5fe0fce\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDB5FC1A4\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6p%2Fxw9vgW3Hvd1j%2BKq2KkuvmMz5%2F6QZnl7RP2Vm9gVUOt%2B4JFEO%2FPSn5UMyyydKCAVDXlQMFiXUe2mQ47wzawLxUNF3dFL%2F2N7C%2F2HlAOUpSfHf75v9IVLqnTl3vvTVeR4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40623\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40623,"size_decoded":41699,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"234ceaebd32e1740812727a5f5fe0fce","sha1":"898744d45820da72603a773df91661b981e9f382","sha256":"a199883b6f4e982d4ea2442b2d515e598c701beac2dc41dc1b23695ae14bee29","sha512":"039f09010fa42074fdfabbc0c9644e679be684f70150228e207c6f2a7bce88559eea0ae6d505f7c531e9f5226e080f7e02ed586534bc116492ffe749852eca3b","ssdeep":"768:p8J4kllXinXAJEc6PFLQGedT18ZYviDlm+Qi1ctwEw9s3atjIKr:p8J4GoTNLQGedTgDlVvlV9VjIKr","tlshash":"3403e12ba1b2dfd7f5d0934c3dd1d6b11b224ec346c5a1b29170e80c6ad1226dd3ab5b","first_seen":"2025-03-01T20:39:52.167373Z","last_seen":"2026-07-22T18:04:42.149468Z","times_seen":51,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/indicator.png","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.282Z","timestamp":1784743419282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/indicator.png HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/assets/css/btn/btn2.css?v=iclg5ycncz2wd0elc7nb\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=6XMJq8DUW2wXZq9s0.HW8X6IbC6SaMQ6DZX6abxFyg0-1784743419.2117984-1.0.1.1-X.JBJlqzTdLD41C5EQWNZwZz0_NSPfkfcPnEcdpfC1z_AIeOrfx_SOJhzhg3waMDG4ryzlmzZJgFegzOfq.gdyP2udFGM.g5Elmg9wEAgcGQfxZH_mSQXXZ8Gr4Lv.q6; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2957\r\nlast-modified: Thu, 21 Sep 2023 05:50:57 GMT\r\netag: \"650bd9c1-b8d\"\r\nexpires: Fri, 21 Aug 2026 18:03:39 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45d027a9a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2957,"size_decoded":3358,"mime_type":"image/png","magic":"PNG image data, 18 x 51, 8-bit/color RGBA, non-interlaced","md5":"bbad9d0aef39c55cba161ff5ab3c7d30","sha1":"f9f2e4b293fd67a108c95d221437240c810d67f4","sha256":"b7704daabf987a684873b073f895609ac0dead3f8139dbd872434a8c67270e05","sha512":"1796b3d76b1725c15ea06a449290b871f1edc653cad9938b877e625cb8043f9d4cb9e93fb7494f37b823434cb7c3acf3c2cf508bde28a11c48c233424f7688d4","ssdeep":"","tlshash":"6451d809dd149c418b8efb449aea9252263b1bd05b41e51abdfdd413b9700b4c64ddc2","first_seen":"2023-05-23T00:23:15Z","last_seen":"2026-07-22T22:49:40.927591Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/FzLZMH7/SYDNEY.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.286Z","timestamp":1784743419286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /FzLZMH7/SYDNEY.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 482271\r\nlast-modified: Mon, 07 Mar 2022 11:38:51 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":482271,"size_decoded":482637,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"732f8b028f8e6bc34992ba38ad31c890","sha1":"0a030451f60ea6880d1f62a279f30302043f253a","sha256":"7ede02e4fe10141ea36d8d406ece1d07e34a790ea2b0dd7c5a9581184f586989","sha512":"48507388e013a4a400eea765816870cde918e13632555356904d02f17c911352b99f55052e50f94ff4564eabd1fc644a08296eccdfd23207c2b83063fd174b52","ssdeep":"12288:l07q1tyAFuVBXJdsn7+FkAmIDZ1T88m4c2i0fWz24:lT1t9FuVBXJ2nVIDZF8LXHC4","tlshash":"80a423bffa5e404de00b3db03a07b94a2a3f4ce28c58e4b16994b19e707507e616db43","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.193769Z","times_seen":11,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":1,"connect":272,"send":0,"wait":21,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/dkQwtsL/DELAWARE-DAY.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.306Z","timestamp":1784743419306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /dkQwtsL/DELAWARE-DAY.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495147\r\nlast-modified: Mon, 07 Mar 2022 12:18:25 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/hVnnz0B/pensyl-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.373Z","timestamp":1784743419373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /hVnnz0B/pensyl-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 493996\r\nlast-modified: Mon, 07 Mar 2022 12:43:28 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.156Z","timestamp":1784743418156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 9284\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 19:26:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoJdIhRNbQ7q26uSX%2BzCQ727Kp9kW%2B%2F5qkuPdreBC2DFMMyrbUieSrCuQKSnhdZzvgGeMTLdMx0hlIzCvG%2BB5vNAnXhoDIwOAPL%2BdCNmSnQmGicINCaUzMbIiXKfov%2BAPZPrEbr3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45cfb8b4da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42863,"size_decoded":10294,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-23T12:41:24.697998Z","times_seen":108445,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.183Z","timestamp":1784743419183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 18:03:39 GMT\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-07-23T12:46:13.099642Z","times_seen":8938,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/JHNxW71/FLORIDA-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.308Z","timestamp":1784743419308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /JHNxW71/FLORIDA-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 492298\r\nlast-modified: Mon, 07 Mar 2022 12:19:36 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/auth/login.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.209Z","timestamp":1784743418209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/auth/login.js?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 18 Dec 2025 02:26:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6943663d-1a66b\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc96a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108139,"size_decoded":30479,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65357), with no line terminators","md5":"8a4b15ed3f06513dae99cc4235a6ec08","sha1":"cb40060815eb3dbf9447f934cadd04bcb859474d","sha256":"4d83408d7af18fde2333ba7cb69812fcbe1a7ee412514d12f51edc5055a03e08","sha512":"a052e76051b1e017563a96a5ee7f9fa80e86055cf81895cd0097321e076514075399ec1a6d2ebef927c124bafb647c34dd21eb38b596b9c842a6d695ccf76962","ssdeep":"1536:pJbZ8DgaIucWkVQfRVeiLxHg1SFkQr+X5grRaL8sMw+pN:pJzWkVaVeiRg1SFk6Hr8L8j","tlshash":"cab38b84b182743757eb44a960aad208f2655405fc234c54f72cc9d19fabd8fa1b3fba","first_seen":"2025-12-18T02:47:54.07807Z","last_seen":"2026-07-23T08:12:22.125447Z","times_seen":1013,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.761Z","timestamp":1784743418761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/97uahxiqZRoncBaCEI3aWz8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 01:16:21 GMT\r\nexpires: Sat, 17 Jul 2027 01:16:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492437\r\nlast-modified: Wed, 14 Jan 2015 22:48:52 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26572,"size_decoded":27384,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26572, version 1.1","md5":"845280fbf7cf0ca7e186e0b68356ae0b","sha1":"3e37848e9b9052cdad47a551d55bebd4cef073b6","sha256":"d729f0522993e04c4463a7ebd01694ad369f6efd78681f270d98afba78aeafaf","sha512":"8d79528c1ec8464544b19df1416690213e25843f817ffac7e996a2ca1dd586980fb7f98fcdd30fd0b0618650caa41696be0a9191ca9093eaf951a201d1793c2e","ssdeep":"768:2SgKX9C7dZgS7QTcHOhQvFnH5yTSDlTzRnmLF:2SgV7QTcHeQvJXR2","tlshash":"40c2e111b56d6308d4e4a7346d0f153e8bdb8e96e1ebeba7d1224e6182479ca8ccc374","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.734186Z","times_seen":2143,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GHCCP2N/MARYLAND-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.321Z","timestamp":1784743419321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /GHCCP2N/MARYLAND-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 484821\r\nlast-modified: Mon, 07 Mar 2022 12:28:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":484821,"size_decoded":485187,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"9918b025f1d77ea925b13d153bb83769","sha1":"99da18da755050cf58b611aa20582f0839dffe54","sha256":"567b0c69c8eff21860e0d77d39660497d5531f6a5e092a1263dcd90439c13a59","sha512":"1425d8576c6f55c01522d5073bd0f9012bdd7134a2f68e55b0c8cb9637bde0c57f762b9f2995b94fd9b16d37917b989a45fbb929ef7296028ecd31ccf3aea7d2","ssdeep":"12288:DTvcObyUIjTWy2dwdf2yJZN/jvLY63q8bUdcC27//:d2UIj4dw5/f/rLY69bUdcC27X","tlshash":"79a4237ddc1ad886d0353cb12a4b4eed741cdab86c94c51374a3f5adfa890ac609cb27","first_seen":"2025-10-30T11:45:25.845563Z","last_seen":"2026-07-22T18:04:42.180799Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":4095,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/2tfq8xm/OREGON3.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.365Z","timestamp":1784743419365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /2tfq8xm/OREGON3.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495126\r\nlast-modified: Mon, 07 Mar 2022 12:39:12 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/skrollr/skrollr.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.183Z","timestamp":1784743418183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/skrollr/skrollr.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-3048\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb98cf4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12360,"size_decoded":5860,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12360), with no line terminators","md5":"7d6ae9201bf4c1d83ebcacc6da3ec09b","sha1":"65b20f0c1dba10c7ba3d644fba7ae80ae08d4ced","sha256":"911dccc7a59863b46d628fdac57d96a7cbf72325fe2555d2a3d165c6258d3464","sha512":"023903172cf7ec0d5fb06f0ed9dbe90146ff5b2ddb8bf5db81f9587078d28d2c9cd22808acee7253eecb779142e92e3b708a2b167a7dddf93ae26cd92bb5c6c6","ssdeep":"384:r/UqdA5yNpXXTLLeT5RyFNPsJ1S+Cmna5WbYBQeU/pBr:r7o6TLLeT5kXk13Bbt/pF","tlshash":"a44209ceb549b47043c375e6c10f5249b236589de8088465ff25dcdbac38c7a01abf6a","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.116515Z","times_seen":2701,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-totomacau5d.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.310Z","timestamp":1784743418310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau5d.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8889\r\nlast-modified: Tue, 26 Mar 2024 08:45:04 GMT\r\netag: \"66028b10-22b9\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c1e4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8889,"size_decoded":9292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Converted from  WebP to JPG using ezgif.com\", baseline, precision 8, 210x205, components 3","md5":"67fd9d3808352cbbf6ab4e5e95203d96","sha1":"6183b3579f6fb6d0607e424ca11269f3c74c2d8e","sha256":"157c3fc50a9a79068835c64a4a57ad51f33cebff9c177e171e632d1e99134b84","sha512":"fcc42d43f3be3791b786e8e66caa3e3ff74ddf162a5d1fb2e409026d8eb05204f9f6373425f1d3432e50acf21b84bdace44861c7eaf2c1849b9da1f14a74c96c","ssdeep":"192:iytawtgRLxvmi5rF+WIKM63JP/iTL25zDA1mzM6nXOUddP9Io5vnHPqYFMU6kUN:ihw6/vX4WIKM65qTSiR6neSdP5RHPqYQ","tlshash":"9802ae4658568169f8ab8e3b683f53124e1c7b8bcac1786d153814bc02e3f959fccf05","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-07-22T22:49:40.81518Z","times_seen":1964,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/zRJFykT/CINA.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.296Z","timestamp":1784743419296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /zRJFykT/CINA.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 466584\r\nlast-modified: Mon, 07 Mar 2022 11:43:29 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466584,"size_decoded":466950,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"977d66b1b1d09159dff1ac0f5958ce7a","sha1":"47e882ba67cba2658863d4e269b415726ffdbd1f","sha256":"1981e770bc607de82a67e94f25d33e6f2de8874effc5e2a3adf8e7bd0b45dee0","sha512":"956129c9b4d3ac8e04cc3711239d1ece35227ee79a069f7a9212ee00b98bf4f98695272748c4b8df622d9e2a88d2d3f15773cb784f1f3392683c92ec4ab4288f","ssdeep":"12288:O+tRZBQ82J0fqPKG121wFYrEkngt0Fo0IC4WVEqGSMsYSaP3:OY/LCKiaAzq2VDj3","tlshash":"01a4232ddc784c8bd86e3ef41e8baf8800790deb1665ca35d454fd27b29426dc58e34a","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.14662Z","times_seen":10,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:42.009Z","timestamp":1784743422009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 20:12:54 GMT","end":"Sun, 06 Sep 2026 21:12:38 GMT"},"fingerprint":{"sha1":"07:C8:9F:DA:64:FB:FB:E4:DC:47:AD:A1:0C:98:26:FD:23:EF:D7:68","sha256":"9D:99:FB:FE:9F:E4:63:AE:15:1D:D5:0B:D2:A0:CD:1A:EB:99:4A:5A:D5:F2:CC:E8:58:DD:F3:90:30:FB:9F:BE"}}},"request":{"raw":"GET /assets/insert-main-2c12d9cc3ded20e8cf09a901b86f5c68.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27314\r\nserver: cloudflare\r\nlast-modified: Thu, 15 Jan 2026 08:47:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6968a99e-6ab2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nage: 1770690\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l83uj7P9ByjS4NUjek2C3HDh39Q1bV0aLsI5JvkbsKaFR374hWOe4pRfEulog2O8ln%2Bk9AtftCsXEjEWUEMJp6Maw6WYnETJWTWKRMdHygPAMPn%2BbpTWYq1D7Jp4eVnFU2L2YQ%3D%3D\"}]}\r\ncf-ray: a1f45d139f1ec272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83491,"size_decoded":28272,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"9b47be60a9205427afaa3db67511ed3a","sha1":"13aba22e343283634526ffa15ffb2ec1e770502b","sha256":"4b15578d1c420a58c1c41c4a88728a887af2540cedcd064f058f92b64299d677","sha512":"7493fe9f50f66a520da4224a3514ee9f8030fae1d79708d17be392c168604c530cf7551f4d8d56659e6d3d59844f053e5b48bfc788962e2f1babc627a54a9d77","ssdeep":"1536:a6VmkhM1hDaYGcvezlk5c6w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5HKp5ffL","tlshash":"898329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","first_seen":"2026-01-15T11:14:47.62677Z","last_seen":"2026-07-23T07:12:05.409097Z","times_seen":736,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":12,"connect":2,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/vbulletin_md5.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.145Z","timestamp":1784743418145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-1639\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb68004e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":2483,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-07-23T08:12:22.127833Z","times_seen":2518,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/rZgzp8t/GEORGIA-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.312Z","timestamp":1784743419312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /rZgzp8t/GEORGIA-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 497724\r\nlast-modified: Mon, 07 Mar 2022 12:22:32 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/fill/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.599Z","timestamp":1784743419599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/fill/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12152\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-r7RKcT9NxSbiv/2gU12nv8/LRKk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834914\r\nx-served-by: cache-fra-eddf8230080-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":12913,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f0561d4b928f3521c1a3a66507052039","sha1":"afb44a713f4dc526e2bffda0535da7bfcfcb44a9","sha256":"555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc","sha512":"7e1018b04408350683e5913ca90abe30976821b7be2f027af178b9635448d07f975c15965f400092f80c086324ebe51118ded29604a0b70b02fdc13cd0cb2218","ssdeep":"768:Tco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Tco1ZkbRxP9d2cwWFvG","tlshash":"dc83efe8f7be1ad03341d1d0220a1632bb0d9324f986bc59c963798d71ea119d78e5fe","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-07-23T08:12:22.115797Z","times_seen":2232,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T18:03:34.353Z","timestamp":1784743414353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; HttpOnly; SameSite=None; Secure; Path=/; Expires=Thu, 23 Jul 2026 17:03:37 GMT\n__cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; HttpOnly; SameSite=None; Secure; Path=/; Domain=balaptotoplay.com; Expires=Wed, 22 Jul 2026 18:33:37 GMT\n_cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=balaptotoplay.com\r\ncf-ray: a1f45cf72e794e4c-OSL\r\ncf-cache-status: DYNAMIC\r\nage: 511\r\ncache-control: public, s-maxage=900\r\nserver: cloudflare\r\nx-cacheable: 1\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-cache-hits: 6\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=0,cfWorker;dur=369\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":107830,"size_decoded":19889,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2406), with CRLF, LF line terminators","md5":"a011b5769e2b2fa3800d9f37034b7298","sha1":"c1e00259f96b58e19b5d7bc7a15bcc54ef9e4099","sha256":"c50c57963a152e6cb60058cf3706430407670ac07f6e76967fce1c0488b3ba79","sha512":"88b36d4f81f38e1d7f267dbf7e4085222d06892f4f8cfc42ec9d5ce97acd7e715ce633d6306fb40a254dbc830829bf3b4924f35d9b890f8aa074ecf0023d6927","ssdeep":"3072:tbS5sQMx0/NgKQ8POamQ8LUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUh:tbS5sQMx0/NgnsvDH","tlshash":"e5b397b255e0202b130256e9bb56e35e6c5d8253cf07461473fc8a6e2f99de2cb1b36c","first_seen":"2026-07-22T18:04:38.80729Z","last_seen":"2026-07-22T18:04:38.80729Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3499,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":383,"receive":0,"ssl":3112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/css/bank.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.129Z","timestamp":1784743418129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /css/bank.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-1a75\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb4f814e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":1592,"mime_type":"text/css","magic":"ASCII text","md5":"927f14cdc2e033eb7d04d6a9af03f6e5","sha1":"95a1493c0183e6ee5eaa0af8e2cd589f71cfc4da","sha256":"eddd23324bf76ed8e866721eebb71ea1ccf9a217f967dcdb5a8d03196747fa22","sha512":"81362fcf4a7c1fc82703f075a6b7b71b06deb7a29a1fd1532c4257490bc52744578826ebb3434807c5b0a95aa6a997c1a30f411cec75613f11d88515806ca68e","ssdeep":"96:gDD6ziSw7CHww/3iP9PEZZPR7qXBLVn/RydJL9EI7CzuAW/Kv:gv66CQK3oKZKBI2","tlshash":"e3e16a26d6d23484ac0bb52014b69fe412395013ef1e5e2d72ceb7bd6f860f5b1a39d1","first_seen":"2025-05-13T11:43:45.096809Z","last_seen":"2026-07-23T08:12:22.179698Z","times_seen":1136,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/btn/btn2.css?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.134Z","timestamp":1784743418134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/btn/btn2.css?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9cf-19042\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5f9d4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102466,"size_decoded":14141,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"53a82faeef066d006b1c6dcac792d880","sha1":"83936e2a53168ec3462f63fa915906b74d42a59b","sha256":"bbb4fc49874bf2713827173489f7888b4150b5d436acc0dcfd66d8028e04ce4c","sha512":"bf7445922fe6ac9cd7915471cf917f824a8deb851a1d6cfe655ac4ce6aa1883a899a41d9173ebf830c077c84447fc6d4858635bdb2de12219d314a355427d781","ssdeep":"1536:tsRV1mHOpBxMDMAMdMhMeMdwMrdMrHqLd+YWrv:tEpxMDMAMdMhMeMdwMrdMrHqLuv","tlshash":"93a354e8a3552d017133cb6977829be97b7d4052da0207adbefb7164b20e99c4136f8c","first_seen":"2025-10-30T11:45:25.795004Z","last_seen":"2026-07-22T18:04:42.279413Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/liScroller/jquery.li-scroller.1.0.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.200Z","timestamp":1784743418200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/liScroller/jquery.li-scroller.1.0.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 436\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-3ea\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbb9354e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":898,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"097d12ca6affd5151d1d56db876cc1e0","sha1":"4f1b6d162e327a5e8d0f37897d4d559dbc265ba7","sha256":"e00749ed99da6de8ee85c1fa969a7571feaba5a506c1dd88be8a12e20ed680d9","sha512":"fd4f03f1ba6fddb3bba25d32d09e9713d08b55fbd11330d43e74dd874646d01a27eb6dc19a49889cea10a09300adfaf1ee0a11921d6858255f31893fa8d8fdb2","ssdeep":"","tlshash":"05119e08eb0611bf0ce5e738fe3f9b1c75f315134222d5a495fae4541d814bb5270959","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.104664Z","times_seen":2456,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/Cv5K9hL/qris.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.279Z","timestamp":1784743418279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /Cv5K9hL/qris.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 356173\r\nlast-modified: Wed, 13 Nov 2024 17:38:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":356173,"size_decoded":356540,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=482, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=840], baseline, precision 8, 840x482, components 3","md5":"b4699b44ce9c7f1ce689c1971d86a327","sha1":"7cfc7af58af5893ca5027cb4a79e74377ba46cde","sha256":"636a85b9de795a3c2b5d0cd7448f69b8cc81b0b59158be1f8545fffe508f144c","sha512":"e8ef53d28442ab777ecd56157ba55d0fdc1032ae361d39ee4e06a515acc5b20f13ae62da9b085e935537ca09be38920ba0c28ce32a9415a6e1e0d339d931eaff","ssdeep":"6144:7zjDzO9QeiRBQPqQD2Rl1PVudpMPQRnF69RdiROJt/uIZnxNNMHoIzq4hlRwhz9W:3DOOJSPt6VudyQq9LiROJt/hnhMI3Qyy","tlshash":"6574225ab311fc60da8d0e34f9de9251736baba05510e58638edbd1d2fc02700d8aabd","first_seen":"2025-10-30T11:45:25.907272Z","last_seen":"2026-07-22T18:04:42.142436Z","times_seen":8,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":4,"connect":25,"send":0,"wait":74,"receive":154,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/mega.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.333Z","timestamp":1784743418333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/mega.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1428\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-594\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c844e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":1829,"mime_type":"image/png","magic":"PNG image data, 80 x 16, 8-bit/color RGBA, non-interlaced","md5":"dcbad8ef557451173cbd6faadaa7afef","sha1":"4e13be9c556722e99dab5608f4722232e9610b53","sha256":"ee99380c744eda83adbe3c2a771e24cb36a42641448dd0fb3a55433d4e15b824","sha512":"92a2c4c17e4b4244dd06bc97386e2ebe862031e77215263651ca757cf784ebc62152f1aa4e7eb9987283c8ab91dffea6d87248966b7bc9e0322249e76ec00618","ssdeep":"","tlshash":"b621b956d5c03eb7c55cc4726fc60883dd7f9d3aa14bc20a316f15d4554c802d61bf86","first_seen":"2023-06-01T16:10:35Z","last_seen":"2026-07-22T22:49:40.892875Z","times_seen":656,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/LUCKY-NEKO.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.845Z","timestamp":1784743418845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/LUCKY-NEKO.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"aa3a0e7e3827fa49b54794d5ac312e77\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDD9EA944E\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imKJipO5T34eJrwcJY30JgkuH1VHtuYwuLDEoeGk4jWQs9AkCmZ0PK%2Ff8xmu%2FBKRpfilOlcRS6WxhsNeye5wLqXKiFC%2Faetge%2F%2BI%2BwpUSxPmkYrd9KNAc58SuhAOWTExPWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43466,"size_decoded":44540,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"aa3a0e7e3827fa49b54794d5ac312e77","sha1":"2fd7e3b7b3468a5ba09a66ed892e82cf355e7cec","sha256":"6b14487f58f57adb5ec9b2c6fb91e8a834d2ec3673022a4108f40f9f6829fc43","sha512":"37c1a4e3ea7af511745b0c4cd619c721b11110512088c328d5ed1e60556e3477b8b9f208ca335f37cc95940de58718fe6fe9b879bd5fb756147da15acd399ef0","ssdeep":"768:IN9BVuuAsU28ynAdDUq5VkFKEoanaVv2Gz9ZEROImbkMnQidgNFE87EpPo:IN9H1LB9qsKEb2bBZEgIIQg0z7so","tlshash":"6a13f215a8b40993bd314fc694a91c0013cf7cd2ca795212a8e8efe22e18cddda750b7","first_seen":"2025-03-01T20:39:52.077814Z","last_seen":"2026-07-22T18:04:42.145421Z","times_seen":43,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/hDWhpqS/MICHIGAN-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.326Z","timestamp":1784743419326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /hDWhpqS/MICHIGAN-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 498180\r\nlast-modified: Mon, 07 Mar 2022 12:30:38 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/css/marquee.css?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.133Z","timestamp":1784743418133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /css/marquee.css?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-89f\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb4f954e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207,"size_decoded":1101,"mime_type":"text/css","magic":"ASCII text","md5":"6ccc75e363025d110b5985afa3187b43","sha1":"25460557a798bd582563b4a937bd8e818396c4b7","sha256":"2d2a7ab1708e5aeee4123d037d8484e9e4c3cca489b4b6b3b931143911403134","sha512":"abd2c4ba7445f3c380036c26a2498d990d9f9103fee6d5f67d5aa489f5a7531affc35dd6fd27e9269d5d804aa36870c3cde5d4182eaf968f9d13839e24f900b2","ssdeep":"","tlshash":"ae41f29b05171d04260bf4842f794201652d8403a28ed9aebea922ccfffa245d1a3acb","first_seen":"2023-10-15T16:21:26Z","last_seen":"2026-07-23T08:12:22.182999Z","times_seen":2297,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.214Z","timestamp":1784743419214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/128f79a146dd/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=6XMJq8DUW2wXZq9s0.HW8X6IbC6SaMQ6DZX6abxFyg0-1784743419.2117984-1.0.1.1-X.JBJlqzTdLD41C5EQWNZwZz0_NSPfkfcPnEcdpfC1z_AIeOrfx_SOJhzhg3waMDG4ryzlmzZJgFegzOfq.gdyP2udFGM.g5Elmg9wEAgcGQfxZH_mSQXXZ8Gr4Lv.q6; HttpOnly; SameSite=None; Secure; Path=/; Domain=balaptotoplay.com; Expires=Wed, 22 Jul 2026 18:33:39 GMT\r\nserver: cloudflare\r\ncf-ray: a1f45d0218ea4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/jwVHfSB/FLORIDA-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.310Z","timestamp":1784743419310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /jwVHfSB/FLORIDA-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495393\r\nlast-modified: Mon, 07 Mar 2022 12:20:17 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/q7HTQC5/INDIANA-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.317Z","timestamp":1784743419317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /q7HTQC5/INDIANA-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 499528\r\nlast-modified: Mon, 07 Mar 2022 12:25:22 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/sC29xYm/MONGOLIA.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.332Z","timestamp":1784743419332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /sC29xYm/MONGOLIA.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 536372\r\nlast-modified: Mon, 07 Mar 2022 12:33:10 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/ygq0sx5/TENNESE-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.377Z","timestamp":1784743419377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /ygq0sx5/TENNESE-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495109\r\nlast-modified: Mon, 07 Mar 2022 12:45:32 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/qrious/4.0.2/qrious.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.447Z","timestamp":1784743419447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/qrious/4.0.2/qrious.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5651\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:15:41 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3enmxIchZWriY8d8qNmNkNm57WlT%2FGqXPrVAlTl%2Bilp3ooc%2B5UV9qNy5j9cQzRkRhBnIG8BBt07HZwrIp45U4t1HDio05K0cupjdQ38lpP8wqFvN8aMpbQAZGoVwpLevKo8aX94\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45d03881ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17579,"size_decoded":6657,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17412)","md5":"ea58889c516e953d6e78ca4834f834c4","sha1":"a9271e81e2ac6a692b1c133811afa33f0f3d7dc5","sha256":"db99dcaf40a926181bce4522477c2efc5924f6c4b29111b6a97faea477c9528b","sha512":"a54840a5542d2db9e92ed267e83bb30c3e68db1b662c99c9ee806832c067cce915929aa87c62c63da049e9ac83db341ede50a00a26e12418b8723e70031c1528","ssdeep":"384:jHHJOCXOLl8aRuhBhp+zlwcqiI12m8jtT:jcLqaRAQzlvmA","tlshash":"25829595b3a1956a639a2ad50c3f244f42f2e4593418419cfbb2c9dfbd3c4c96039f3a","first_seen":"2023-03-09T22:04:46Z","last_seen":"2026-07-22T18:04:38.835121Z","times_seen":1103,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=66c6a27d7ab48068240f5e2a","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:41.955Z","timestamp":1784743421955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 20:12:54 GMT","end":"Sun, 06 Sep 2026 21:12:38 GMT"},"fingerprint":{"sha1":"07:C8:9F:DA:64:FB:FB:E4:DC:47:AD:A1:0C:98:26:FD:23:EF:D7:68","sha256":"9D:99:FB:FE:9F:E4:63:AE:15:1D:D5:0B:D2:A0:CD:1A:EB:99:4A:5A:D5:F2:CC:E8:58:DD:F3:90:30:FB:9F:BE"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=66c6a27d7ab48068240f5e2a HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"17f-jhZixHj1FbQt1d6Ev7f0QtMfzWk\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNV30UwACID1la7TOCqAojH3XXgv8J075TjLW%2FMidHzP1yki%2FLhx3Ub2BSJ%2FfOZMPLKIJ6ql33BpYvRkLWAgPkRCiWLeETB2oyDLv2%2BI9KIR0qZjlZxtJVMfYAsom5kc1A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1f45d133da4c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383,"size_decoded":989,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"5ac06bdf291cf0b64fae31949085ed9f","sha1":"8e1662c478f515b42dd5de84bfb7f442d31fcd69","sha256":"5175093825e4366ceb6ae1b34eccdd858ec2f009dd9be8451883570d953dbff5","sha512":"53ea2ae4ca33ba8cdb0eeeef050f3b035d1b1e5a1712622c08ccd64b4d77673548c125f0f260efc6a71b527f58590e3704eb51fde4adb4fb31430a6d4304d6ef","ssdeep":"","tlshash":"bce02b42eb250f129b603675a90a1bc668afc3574b40d9a9a871ee14601ac915064c7e","first_seen":"2026-07-03T14:18:17.182179Z","last_seen":"2026-07-22T18:04:42.40393Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/vendor/bootstrap-checkbox.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.108Z","timestamp":1784743418108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap-checkbox.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-1b5c\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb2f034e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7004,"size_decoded":1642,"mime_type":"text/css","magic":"ASCII text, with very long lines (876)","md5":"3d4ce2ff275a69d37c270f286934a8da","sha1":"8fd72e27451d35b1cc243a1fac5fb4ebd52d4aae","sha256":"2f81d99d41759567af9d4e9562d4c62bef7ee42e4d1a7b62fc2d45b7a0e34334","sha512":"bec920b211a4a554404fca0245a1640d6722ba738d642a6edfd0623e1ce866eee7c5012d7cc3ea938f263c36d3eec5de1eedea076cbbd62365565f9269178acd","ssdeep":"192:pQu9GEHnN95MDkCeoj99LOSAUT6oIjOhL5fPKzRKz:pXN9z6tAUrcOH","tlshash":"fce1ec2ada610098f137c12d66cc9b9b6434942297252fbdfacb2478de9609c2c737dd","first_seen":"2025-12-04T05:42:45.98976Z","last_seen":"2026-07-23T08:12:22.1787Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.757Z","timestamp":1784743418757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/robotoslab/v6/dazS1PrQQuCxC3iOAJFEJYUt79146ZFaIJxILcpzmhI.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31576\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 00:46:28 GMT\r\nexpires: Mon, 19 Jul 2027 00:46:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 321430\r\nlast-modified: Thu, 28 Aug 2014 20:40:48 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31576,"size_decoded":32388,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 31576, version 1.1","md5":"031611afee9339d4e1f76795a28aaeca","sha1":"8be046d89666cb1bc0323f4a22c6d63b62b922cb","sha256":"2de6a4f3964c03bb35fb9d54b3de00ac38330f5cd91389a3d462269c27775373","sha512":"5a640f6c2eca78c39646ef4bc1af2f932442188c6e1eb31f55c28426fbd940416e46e8d5da0be442d302bc1ab71d6585acac24bcb9bc3e0c8b1cb68ed9d7990a","ssdeep":"768:/OLXvKTy00GtnIF4KZnHlsaa8Nj6Vii1BLT4v2mkwEp1RK:IH00aGlsaVNwi8LsSu","tlshash":"5ee2f150de5ab94652aa0e7450c0021dc27121ccfbf8aca1b739d4d1966ebf799ece22","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.718211Z","times_seen":1881,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.150Z","timestamp":1784743418150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 394\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 19:26:13 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWIzLgR7uYtw2NUAocGE0%2F3AvUk5Kch7hp%2B%2BQXAQI3hyVOrxuBdqcsrL5rRL%2F4wbdX3Qs38qn4dveTOIWTfgrZNVcZ5Oqd3DGvxYeZ%2FG9Kkfse43MgepYRVRfnKaCbhWKNQRLGxy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45cfb8b3da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":1387,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1327)","md5":"6a62ad0f300504c583e7797c79c2d8ab","sha1":"e6e4f113fc2d008516d21228dac93bb6a2fcbb53","sha256":"50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72","sha512":"c879273f5fc0c11fb2c76e9c075cb4723bd050cbc46b63c5cedd5cf4b952e29450e4d39364559b8418a0f97f46f5e616ffc9b4ff8397371f29c49eb3e7bc7477","ssdeep":"","tlshash":"c2219d551496115a4027d3125ed3da9a38ebf1525c3607cef7408305ce8fbae2dd29e7","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-07-23T08:10:14.690423Z","times_seen":19737,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/uob.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.348Z","timestamp":1784743418348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/uob.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 52191\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-cbdf\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacc04e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52191,"size_decoded":52594,"mime_type":"image/png","magic":"PNG image data, 2560 x 723, 8-bit/color RGBA, non-interlaced","md5":"2c682ae361b71fc92f8611a44ae08611","sha1":"0eb57449e393b409ae694b6a762fbbc3d25015d4","sha256":"b227b05b6acfc3a3739e43a934ac5a91c7d4710a55700af44aa4b8516b4af216","sha512":"97d31deebffefb53977c0c927a764da47c8e6c148747421b8d81566f0004c75ef130ab0a884d652c87e1ebb7c3c14560654b4748bcb00276fae232d0642df84b","ssdeep":"1536:+74jVPX4cy2ksoOgplGhxR2j5rra4DSGnx9z:ksusoOgkb2jJrtDSC9z","tlshash":"4933e1c2cea29830cc98533187e7df60b3765ebb48bb03a615b4f2157d573d5284a72a","first_seen":"2025-03-10T01:18:36.704054Z","last_seen":"2026-07-22T22:49:40.921612Z","times_seen":147,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GskT823/ILLINOIS-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.315Z","timestamp":1784743419315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /GskT823/ILLINOIS-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 483952\r\nlast-modified: Mon, 07 Mar 2022 12:24:01 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":483952,"size_decoded":484318,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"c2e009f8d51b430d5b624f3e98d7478c","sha1":"4147971a753ed5f3fa96d4ee9a4dbe5c227ba35c","sha256":"df8d44138c0c93878b002bc31817bf2983387737b7b812ebca01fd9390a9160a","sha512":"3f067d206d250b7180244bfa59b323af0307b24c1235ade46a3729f291ca336aefa628616d09b560e614656739baf0e395677f81ad2a932a4e9fe85564010ae5","ssdeep":"12288:0SYKw52p0rjc85Sb7Aikbff+YyqZKzm5BDbuOU/UM:OKb0rjcaMIff+VqZKzQBDbFUv","tlshash":"bda4227ed02a4edda10b3e31b6675745116ec8f0ce8cc7aa61e5b87ab61855ce3ec340","first_seen":"2025-10-30T11:45:25.771084Z","last_seen":"2026-07-22T18:04:42.341944Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":4084,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-sydney.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.316Z","timestamp":1784743418316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-sydney.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4533\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-11b5\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c324e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4533,"size_decoded":4936,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"4ae2801024b806bf9c792b648c2069ff","sha1":"5327fd9187084a3cd5665b061be1ad50a88fd6b5","sha256":"e7f471995cff2d274f80d9c96d3d4a066d8731fcea2d52446a93d88bd5e0d878","sha512":"f89eb640e5aaec141e870f04b441462557bd49d6e8d7cd72c607552b1983d9b8ca5eaccb403cf7e4037c7465fe2be0c02ada45b49873d6554b5c6fb488af0d9f","ssdeep":"96:lP+laji/gq5UJGWqiRQux3DlXOb4vCK12ccGMkFs5AaoS:xrircPqdmS4vTkrAaoS","tlshash":"73915c21c3595704d89d43346ca51a6c920c6daf09d9b165375c6ede0c3bbf0ee4f618","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.925036Z","times_seen":2047,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/SKLHCnd/TEXAS-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.383Z","timestamp":1784743419383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /SKLHCnd/TEXAS-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 514428\r\nlast-modified: Mon, 07 Mar 2022 12:48:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/vendor/bootstrap/bootstrap.min.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.102Z","timestamp":1784743418102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/vendor/bootstrap/bootstrap.min.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Feb 2025 03:25:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a03711-1aaeb\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb1ede4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109291,"size_decoded":18407,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0a79db938c7418a0f16560c8758d8d4e","sha1":"79b10b3baa06c8b73b986187521e4a0d6766f938","sha256":"1100977a241133f42972e197c28a12254b88b7b512eb3f4a8d79f3d7ef8a0084","sha512":"3c026bdb70c1b28ca42b52d5e6c77e9ca1f5f63199ebfd3527c92f3bfcaf0b48f0b5e16ee88bda50ddeb5795084f57c3685a50ce49c66818cf31c45b302452c8","ssdeep":"768:jbGxwUkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNaw:kwldERdvGNIkabbRk3chO","tlshash":"c9b3d7a0f11031ea7223c55a71d0ed872619a053e66b4fb7f22f25d88f895ca1773f1a","first_seen":"2025-02-03T12:58:18.829121Z","last_seen":"2026-07-23T08:12:22.119079Z","times_seen":2124,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/SliderLivePlinko.jpg","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.291Z","timestamp":1784743418291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 08:48:33 GMT","end":"Mon, 24 Aug 2026 09:48:15 GMT"},"fingerprint":{"sha1":"7D:5E:0F:61:41:B1:E0:F7:45:58:0E:EE:54:60:25:B1:B3:EA:3C:48","sha256":"4A:1F:08:76:AA:8E:37:FC:E0:CD:06:F7:7F:48:79:86:42:39:25:53:1E:DB:3F:8B:D6:20:0A:58:84:1C:AC:24"}}},"request":{"raw":"GET /banner/image/promotion/SliderLivePlinko.jpg HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\nlast-modified: Tue, 19 May 2026 04:41:46 GMT\r\nserver-timing: cfExtPri\r\netag: \"6a0bea0a-18603\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fm6Yr1o23rBEP7keCkwrbBbO%2Bh7rGnyR4YcSaFPLepvXIhrzqPVgUP0HbnA2%2B1nuBQ1SI3U2jDi0O8n7gR6z3NOejZ1qYbM7ob1y%2FwB8b%2FeAmxWg2RbhAPakERf2%2FC5OMnFP\"}]}\r\nage: 1615\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cfc9dc7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99843,"size_decoded":100577,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 840x480, components 3","md5":"041234559df09283435cabe2c179ec1c","sha1":"4b3d97377e712390cf314de5f5365e493433cdba","sha256":"a839fd07844d08a0af4dbfe150e2635b81d65284123ecd92b19abb90aecebfc0","sha512":"a9d49db41a10073a61e564c7732167c1bad931cb47a90e2eb27791c3aabb1d02a6b4746741d9730383aebd7359487a427bdf41e028e7e35adf23bc9a930cb361","ssdeep":"1536:3w7pZm/6sYleMiT3nte9kVIE9W+a5OEGjxcaIYxW/bwQtE+DIwZGqr9AyOGO:A7pE+eMibo+apTZ/kHwZGqr9t+","tlshash":"8aa302624a01ed92fb5498f074e7c1306799e211675480c2b9fd8e06dbae740177efbb","first_seen":"2026-05-19T13:33:57.597754Z","last_seen":"2026-07-22T22:49:40.709464Z","times_seen":52,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":11,"connect":38,"send":0,"wait":12,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/SliderSpinSoccer.webp","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.296Z","timestamp":1784743418296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 08:48:33 GMT","end":"Mon, 24 Aug 2026 09:48:15 GMT"},"fingerprint":{"sha1":"7D:5E:0F:61:41:B1:E0:F7:45:58:0E:EE:54:60:25:B1:B3:EA:3C:48","sha256":"4A:1F:08:76:AA:8E:37:FC:E0:CD:06:F7:7F:48:79:86:42:39:25:53:1E:DB:3F:8B:D6:20:0A:58:84:1C:AC:24"}}},"request":{"raw":"GET /banner/image/promotion/SliderSpinSoccer.webp HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\nlast-modified: Tue, 19 May 2026 04:41:47 GMT\r\nserver-timing: cfExtPri\r\netag: \"6a0bea0b-1482c\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlDO0dq%2BIk5Ry7eLtjEaBrBInjl7JuoujLpHzyJswF3TYPo%2F5lbAo9g9sWP2Kr2224b3ivehzovmYN01oJNEx18FQd7xOsqwcT3ak7Ksx478dolxseSMkE4%2FRjiPrxkQE%2FS2\"}]}\r\nage: 4333\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cfc9dc8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84012,"size_decoded":84744,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18df198e6257eec7672ea4226bee0beb","sha1":"ba38fe10d1604bc0ac661fea479d0f1bd8b6d047","sha256":"3c0e1f554372d9fe16fa590ac3267b7ba4f581e78fa7d426d6b8768d005d1ffc","sha512":"2a6aaf94203969250f281ffc61a4ef3c5902384bf581620e6e24e458ef6bcdb6ae866e1f7a365e5e909ac41b02ef404d4bcdebb9c7e732008e85738c02830454","ssdeep":"1536:s1HqDGZedkQKwJykLVUNQ8tb/vhDHnTlIbaAmKo19mYk4DdKCPPb:s1HqDnyw46FeX1Tumryc","tlshash":"8f831243d44a53afcc221bf0695c5dc69a4cd95a9ba2ac53cad6f07c0a724c31f1791f","first_seen":"2026-05-19T13:33:57.727938Z","last_seen":"2026-07-22T22:49:40.706283Z","times_seen":114,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/k9FYcVg/pensyl-day.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.372Z","timestamp":1784743419372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /k9FYcVg/pensyl-day.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495205\r\nlast-modified: Mon, 07 Mar 2022 12:42:58 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/regular/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.589Z","timestamp":1784743419589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/regular/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12135\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"13133-n+q1flyUhQcTQlCvNONC51P8Ap0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834870\r\nx-served-by: cache-fra-etou8220189-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78131,"size_decoded":12896,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"7fe7108986e8596a197c607b2d989d89","sha1":"9feab57e5c948507134250af34e342e753fc029d","sha256":"873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051","sha512":"73b14fe9422707df4bdfd7fe031a94f3826d8e48e250188f934cfcd61a050c994790f21da68ca1914d87703e4886b71b54817e030c5a6843b480d55144a8dec8","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"8173f0e4f5fd18d05389e1d123072661bf0da329994a2c69cab3bd8df1c2219c78e6dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-07-23T10:44:59.270687Z","times_seen":2438,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/additional.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.143Z","timestamp":1784743418143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/additional.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9ce-299f\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5fd84e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10655,"size_decoded":2332,"mime_type":"text/css","magic":"ASCII text, with very long lines (7696)","md5":"2ff4a977a650b76a8641166f92a7507d","sha1":"3b3e18ea7c29a8acdbdfc3c5b444456f781021e9","sha256":"2b735a9ab21e15a9f70552ac4d1f479b4df7bf5161a07c1bbee610e00798c3f4","sha512":"e5e4602361570a4a6bd76fa611386685d004e8597b4e8f9121f35758bbb9931a4db4641dbf8ac8530d2fd208278dbda7700846c47cf2d3d099a8d1c0b3729d7c","ssdeep":"96:MJn1MOnIYUHsX/dGOeywAjJLX0RcP5VKXsp27lbw0kIoX6pd6j+lY/g4nqqaMTuU:KiuIrLAjJLX0RZD03uBn21","tlshash":"89227c2754eafddf301f83981d3926614b4ac688d7024f6eb36cf3f9749a51d4432a8a","first_seen":"2023-10-17T12:18:33Z","last_seen":"2026-07-22T22:49:40.844331Z","times_seen":2007,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/owl-carousel/owl.carousel.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.187Z","timestamp":1784743418187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/owl.carousel.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-3a44\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfba8e54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14916,"size_decoded":7111,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14916), with no line terminators","md5":"2fec2de7cc7d2d9a66130311f52b5db8","sha1":"5cfc389925bd8200ee1e0fb224434ded9cae3f15","sha256":"4b18105a346260a3e8359cd02633fd5f8bb244f2d5f43e4375a1efd10e5c865a","sha512":"2c65ad232d52605402fe3c61104ca6e19be96dd89eb072e8554c3019b549c1af260a6fd16ab7c007b4ddc24e9c0bec770aba5cc4d1cff2fb7a9a241699d8a04c","ssdeep":"384:XWxb9XXAhOfMSelTARgzoSC0Z4eAchzD/DM5F:8b9uTARgz5C0ZVDL2","tlshash":"1962183a2152321653b261af157c818213e548023ec7b464f9e6f8edebb6161117bbff","first_seen":"2023-03-07T01:34:34Z","last_seen":"2026-07-23T08:12:22.097432Z","times_seen":4084,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/json/floating-datas","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.246Z","timestamp":1784743419246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /json/floating-datas HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nX-CSRF-TOKEN: jGcyz4Lr5XD1YPt7Nt55MGE9qQqLx32xVbPu4hom\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 89\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=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%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a1f45d0249da4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":1334,"mime_type":"application/json","magic":"JSON text data","md5":"3f11c5e31d7ae8aec557959833089883","sha1":"57d8165c6d4fb5680005453b120e790d9f9477e0","sha256":"147e940430b18ace58692958d59fb31536dcb79d451082e15b216ef3c5807502","sha512":"a3279e2bf384852b684d9243be5fa0eba1a5631d1a90719dbfd8745ddc5828fadf16b8241e0d85c36db767b4d7a22f38306162b6a611f0aa14f1569d7c9e192d","ssdeep":"","tlshash":"dcb01200110468158e4015cfa0001e206ee12916841d28c48c4c101c4b581dfec06001","first_seen":"2026-06-11T07:43:56.225524Z","last_seen":"2026-07-23T08:12:22.102512Z","times_seen":255,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/6JjxpJg/NEW-JERSEY-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.355Z","timestamp":1784743419355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /6JjxpJg/NEW-JERSEY-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 483209\r\nlast-modified: Mon, 07 Mar 2022 12:36:13 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/xjVt2pg/TENNESE-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.378Z","timestamp":1784743419378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /xjVt2pg/TENNESE-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 497320\r\nlast-modified: Mon, 07 Mar 2022 12:47:11 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2Fbalaptotosbobanner.jpg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.276Z","timestamp":1784743418276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2Fbalaptotosbobanner.jpg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"4c077795d9e8f9b53835dc424c4a5db1\"\r\nlast-modified: Sun, 31 May 2026 21:51:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBC2BD8D720\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20833\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rn0hwSPQXBTuwsySq4H3XjomfeWc1FOhEGWIsVKO%2B77IcDur0Fsr86FZZViAsOgCgI%2BV5JHlolrNpVn4zZ39zaCiDLcz7uk893eJQ4378O5Qzwa2R4enox3pTlpQVW5tNtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cfc3e215ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 220460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220460,"size_decoded":221528,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x731, components 3","md5":"4c077795d9e8f9b53835dc424c4a5db1","sha1":"820162529dd3e286342773f80d1f4b310822c3be","sha256":"22b75941a519530439126e12b7367f93b3d6f894a5651cc59930f2c1da67a18b","sha512":"52a8cb070f5d92dc15fa2be375cb999446f3fca0990aa5c07c75196ed5549097c232c2ca9af1d5b48403fefa9bbf8a06353ee04c12cb60439b305a15863a73c0","ssdeep":"6144:ntIlQXSSZHU5Kssx5vRxx8AIfdHoUFU7tLoYr8r04:ulQCSzVZxMIUMo+8x","tlshash":"ea24232f23359620ecbce445c31146ca602e1dce67cd2beee493945effd7b6a46a0604","first_seen":"2026-07-03T14:18:17.107068Z","last_seen":"2026-07-22T18:04:42.37359Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/gtJ7WSK/NEW-YORK-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.361Z","timestamp":1784743419361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /gtJ7WSK/NEW-YORK-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 487698\r\nlast-modified: Mon, 07 Mar 2022 12:37:36 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/bold/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.597Z","timestamp":1784743419597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/bold/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12152\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-NwF2ejU9knAYHLwpS4Iszl9H1Q4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834853\r\nx-served-by: cache-fra-eddf8230131-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":12913,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"debe807490c196adde15ebeb37781fba","sha1":"3701767a353d9270181cbc294b822cce5f47d50e","sha256":"c8a32df67f8bd57f70c6371e15ec232df25ddeba3eb9060d7aaa68101a6ce240","sha512":"0e10ab3c302ef9f99ebff03943a574f02a99def68211bc0f4fb0e5219d9e8b98d0633c4e83751e46f7bf2e9cdd50cabfd3718edc432f0460efd2e72c9366fb51","ssdeep":"1536:XeaKqhzERv84EqLCDmu3Oug/mH89BUkr6WfzA3LVUr5T5FX2aIoNlY:XeaKqhzERv84EqLCDmu3Oug/mH89BUkW","tlshash":"dc83bae4f5bf28921301d1d0330b1a61bb0d9324a946ec79c9e37ead61c2999c58e7df","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-07-23T08:12:22.197924Z","times_seen":2080,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bca.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.317Z","timestamp":1784743418317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bca.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1086\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-43e\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c384e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1487,"mime_type":"image/png","magic":"PNG image data, 78 x 24, 8-bit colormap, non-interlaced","md5":"6acd78d945803ba574275cb83b5e4981","sha1":"e2705a9ac3be32cc594bf8ebe29da30c46cb2013","sha256":"b60a19eb59f86325af0f4c3e4736e6ed7f3ecc1cadd6efe316e90ae7a75f0ce7","sha512":"1432ba4bbaaaea7bfefee8954f73f99d758fb0f02062cfd56d2cdd1b1ab21bd2bfe10604ff8bef8a63efc76f3e90fa17e9e65726178a50544701d7b0739f5423","ssdeep":"","tlshash":"1411b9b4fd87c09fe6701d35d5f79a28c8111c3ce9624997cd7482a7b897c808309195","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.92571Z","times_seen":2102,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/jW90fRG/INDIANA-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.318Z","timestamp":1784743419318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /jW90fRG/INDIANA-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 485720\r\nlast-modified: Mon, 07 Mar 2022 12:25:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":485720,"size_decoded":486086,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"7ae117332f7d2697468c1213ab9dcb47","sha1":"5538a4475c998e8ba3012f6e5dc71fb7c64ae417","sha256":"04f960627c6f02bea75e98a8b37f360b469269e9ee4369d36e150246a323c151","sha512":"9ec182c6ae0457fc1dd197d9b92f88248986819d26d638414fca1b2428af4d35e27c84223c77a0e4512e362ee7a2d881a2c38bb27c1b7d76f00af9c367a2796c","ssdeep":"12288:NB/KwX2fpe+3kzHzCZ63HtnYkHKbpxbZRPVY0KxKEeVPCjBDq+:3iwipozHzdHrKbpxlYrUJpUDq+","tlshash":"dda423aefc246faed1663e34bd174e85c874cde5864040b6024cb5b778484ede6aeb0d","first_seen":"2025-10-30T11:45:25.841314Z","last_seen":"2026-07-22T18:04:42.136384Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":4094,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shareservice.net/banner/image/promotion/photo_2026-04-16_10-11-39.jpg","fqdn":"shareservice.net","domain":"shareservice.net","tld":"net"},"ip":{"addr":"104.21.16.37","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.297Z","timestamp":1784743418297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shareservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 08:48:33 GMT","end":"Mon, 24 Aug 2026 09:48:15 GMT"},"fingerprint":{"sha1":"7D:5E:0F:61:41:B1:E0:F7:45:58:0E:EE:54:60:25:B1:B3:EA:3C:48","sha256":"4A:1F:08:76:AA:8E:37:FC:E0:CD:06:F7:7F:48:79:86:42:39:25:53:1E:DB:3F:8B:D6:20:0A:58:84:1C:AC:24"}}},"request":{"raw":"GET /banner/image/promotion/photo_2026-04-16_10-11-39.jpg HTTP/1.1\r\nHost: shareservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\nlast-modified: Sat, 18 Apr 2026 00:21:10 GMT\r\nserver-timing: cfExtPri\r\netag: \"69e2ce76-18157\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c95PFPzD0Tty1j93MMMFWVr9eS5dsr38TA8oXZ1w9uZ7tjgMAFp3%2B0mSCXGB9H0RCjjRqJifuoXouRq7XnKe55BK6imCUaxCfdxlG2Jtps5SrXzhM0KgUmUIp8hKxdF2fGEm\"}]}\r\nage: 7\r\ncache-control: max-age=5356800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cfc9dc9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98647\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98647,"size_decoded":99370,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 840x480, components 3","md5":"120a903eceebdc7f594100bc1507e17e","sha1":"8e634070b60f24000cd256cd2fc8836c67a7620b","sha256":"9c3e09299685b8660c0578e665c6c9af573a8c7ef9692324767f27bdc326989d","sha512":"c71cc020ce71ae31c2b93391e5337d2f112dd5c8451e23e66efacca3d5f807ea0584ade46cf10cd5fd2accad0650d5a5d280e2294998dbde656ca40f7331daaf","ssdeep":"1536:dN8D2xU9RWXaCoIFrcjtIw3Kqyn6FthCaUjp9RIq8H/Bfz8Ip8CGfZJ9qLiXIyZl:dNKaX0IFrchv6Ln6FqaqZ8+E6nVXIyZl","tlshash":"cea312d827bdc931c1381b75e5c547dd9e91319ced43727e8e4894f8e4b02a1c0a9b6b","first_seen":"2026-04-18T07:34:28.078704Z","last_seen":"2026-07-22T22:49:40.730198Z","times_seen":121,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/danamon.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.324Z","timestamp":1784743418324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/danamon.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 897\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-381\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c674e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":1297,"mime_type":"image/png","magic":"PNG image data, 83 x 21, 8-bit colormap, non-interlaced","md5":"09c3d58d1975cda982b351344ed43da1","sha1":"83c6e4c954bd431779cbc478472e3931c65f204e","sha256":"3e911cbcd7f001af49b046d34bb7cc40c9b2e3ff280d0da498641c99a6509dfe","sha512":"c1b780aba1e8a03e333a7e35bf08a4c2037a1b6989ce86831243bcc1d4d0f8c9eae6fc8430f540de41a90f2ad6b4da91eca2cbe3902d0e0e05d6f06d287c63cd","ssdeep":"","tlshash":"a811b7f69c11381c64d1f9d3302fc26ca53d12521ab1874bd7972cbaee2f6800054270","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.755461Z","times_seen":1417,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/fMHzZrV/PCSO.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.370Z","timestamp":1784743419370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /fMHzZrV/PCSO.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 490552\r\nlast-modified: Mon, 07 Mar 2022 12:42:08 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/NrnLbHf/OHIO-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.364Z","timestamp":1784743419364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /NrnLbHf/OHIO-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 481376\r\nlast-modified: Mon, 07 Mar 2022 12:38:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.17.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:41.804Z","timestamp":1784743421804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:04:01 GMT","end":"Sun, 18 Oct 2026 13:04:00 GMT"},"fingerprint":{"sha1":"81:C9:4D:B9:5E:69:7A:B0:BF:EE:16:07:09:0E:5C:7A:19:5B:FA:21","sha256":"A6:A5:1F:B7:00:5E:82:4A:51:22:67:26:9A:31:62:12:42:05:FF:19:A8:2D:E6:63:9E:28:2A:DE:F2:EF:4B:25"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90323\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Oct 2024 08:12:29 GMT\r\netag: \"670f756d-160d3\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nexpires: Wed, 22 Jul 2026 22:03:41 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1f45d124bcc0b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90323,"size_decoded":90715,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"8db56736ea051fcd404982815367ee0b","sha1":"b5056f17ec73b72f7f6675273ce1f28b6b4d2b46","sha256":"4e02417535468c9d74f33333ea8aa01ee1921f11cf19de61d1f9b1288ca9019c","sha512":"0b82f0c5ea273bfc4f4b5bf6064f17b4881bd8ab384b39b423d1f2a3ec9c5f29dea536aad9a24bddff9c3f89109d26c3ac07516a5c2066f626ee09abb5be2b0d","ssdeep":"1536:6QOQkYEy10jihMFSRHVh+eh58McnIJjB2FH/lq8gnkx38rQIW8BbeV/H:6QOQkYEy10mhMFSRHHb78382F9JxssII","tlshash":"e49302afd1b007c6d8b052b1ae3fdc4de001a51ce6a6a59ff6af45e954dd47c0a90388","first_seen":"2024-10-22T04:17:53.660679Z","last_seen":"2026-07-22T22:49:40.951918Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/message.js","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.159Z","timestamp":1784743418159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/message.js HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/javascript\r\netag: W/\"29da031a392133c73150b178e639f3b1\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1LuNbDiRiW%2BmjksyNekFV54np4jCd2sTf%2BWEwqp8CX8Tw71LLXeQ%2BpETKSnz5XrpDH7mQfW9YqiCsEgz3hCNW2FOCcmMob43gmfUKJKjJWaxPXHbZN0K%2FP%2FW0GwR%2Bn63H0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBD8C525B93\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20827\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1f45cfbadfc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19632,"size_decoded":7332,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19576)","md5":"29da031a392133c73150b178e639f3b1","sha1":"dfd6f1ffce6c69207efa10cc1a79c7eb24c93361","sha256":"19bc4488d6b4626afccf834536c48940eb0178c63a5b469cbee6c54140e43f95","sha512":"5af312d8a797cc2d17f58914784d0d3710c29deddeaf30904ab95ef140b28b46fad58b6700acbe7cd9305c8c4edd662b2d6e07de0b5fb5faea873fa2319c6252","ssdeep":"192:EOf7/FOGZSlogwJa8XVDaYXC8R1DRWpiItZxGBwRa2WKMaRK+IWa1Z0iOZye2gT5:zGXwBXY8lR1VW4Z+RpjKHF0tY6sFdQJ","tlshash":"70920be0ed4359d792c75aafe2b7e3c9f956ec3eb4840c0794017e1052a6129afe1732","first_seen":"2025-06-08T10:54:51.892732Z","last_seen":"2026-07-22T18:04:42.184155Z","times_seen":13,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":10,"connect":14,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GRYyN45/JAKARTA.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.292Z","timestamp":1784743419292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /GRYyN45/JAKARTA.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 502922\r\nlast-modified: Mon, 07 Mar 2022 11:41:51 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":502922,"size_decoded":503288,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"5e3c5bab92034c4d54800234ca0419ab","sha1":"c3440452897af43964fd46e7a24c39ac8a428a63","sha256":"99e71c05a950b9cba50296e0bcf24776cac6aaf8f3562c2da83bf8abd29f5bdb","sha512":"01cfdadc29e99822ec9a1a578f238fc4dda526ce7aece8196c42170f943f3eef4ea93f2cb4662ed660dd2d7be3ddcbf38446a4706021f9e549f013ac1d4d03c2","ssdeep":"12288:SJTFTSG0EFl8Y63flLumdQQDyvoVKsGspjdNW/lqTe9BzrfKp:YJ1c5flLuEQAbTKrBXKp","tlshash":"f0b4236ee90c4089f92b3e385953e5b710698df74d20c4736fa5b3a7750d2ec20ac79a","first_seen":"2025-10-30T11:45:25.768402Z","last_seen":"2026-07-22T18:04:42.414039Z","times_seen":8,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/vendor/ribbons/3d-corner-ribbons.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.109Z","timestamp":1784743418109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/vendor/ribbons/3d-corner-ribbons.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-1598\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb2f154e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5528,"size_decoded":1576,"mime_type":"text/css","magic":"ASCII text, with very long lines (428)","md5":"88b7c3a6414f46ea6d8487cf9f210ca2","sha1":"bd723876d02bf30eb94170476a9c46dafc3f07ea","sha256":"20b434a57bf4200f827db0dbbef637b3a0ccdea4f0115dd1df9f9cb3aebbbeca","sha512":"147a623bf4e9b7cdb2eeb63c974afe76d51491531493e750fc563fe247880deeb8cde6d72819b94b7e44f7dc425cbc347de2f7b7a0b9e0d14e2dfc481f3f350a","ssdeep":"96:qSV3jnnDckrtESMXWgu+4C7+yG1eZu3n6emwZyvvBfUGNASc7X0IqjJtd:q43znDckwuAckibmrvm8catP","tlshash":"edb14a159c9990e8e217811fbbf9be58c72d9153ad11ceaef306e4f7036a18810b6f53","first_seen":"2025-12-04T05:42:45.855298Z","last_seen":"2026-07-23T08:12:22.198602Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/appear/jquery.appear.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.196Z","timestamp":1784743418196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/appear/jquery.appear.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 677\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-610\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbb9264e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1552,"size_decoded":1139,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (752)","md5":"5fbd164d0b2001df2ba85327fc6bab39","sha1":"13e083d8852729d2e6cfa3fbcf3955a28275fd00","sha256":"5d19547b40e94ab90e831bec03fc23d4b894894bb93006b3b3fd8d62e2f355ca","sha512":"5e667b534b3c4cd17e92d4404055e434be7bd07544354a2a1ba56947468799525dd86226e0f1f9d0015421941dcea765c566c1d6a8eec4e1106f2e9bf2064f7d","ssdeep":"","tlshash":"6031ff6b31db3a9556fb703fb61f73155221853b0251e052d9fadd7c39b2d42b803a44","first_seen":"2023-03-07T01:10:45Z","last_seen":"2026-07-23T08:12:22.194364Z","times_seen":2711,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/frontend/desktop/template_v1/before/index.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.210Z","timestamp":1784743418210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/frontend/desktop/template_v1/before/index.js?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 15 Apr 2025 05:40:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67fdf15e-3078\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc9744e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12408,"size_decoded":4684,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12408), with no line terminators","md5":"6e5ce401fa29e20cf8f52e5d754a5d5a","sha1":"b55566fc452442bfffc73943eea5177ccd00fcac","sha256":"7f1d23659e76eca87d310351b7598a64201f99a8be2a947319f0182cdc3b0cd2","sha512":"e4ac4422d6aeee85a36002a6ca346faad7e1de6510ed0253b2130dfefba2bf6d3e186a0907af294df5d71118a002f6dfc6cc9f2e4e9eef40ce374fed672bcfd5","ssdeep":"192:ATn2PoqeRfRll0OR4HCcbNQNJ/OhxwBZcAoL/3eqnhqgSt081qq44WIzEtMyCGWV:YpqEPRfeIJWhDAoSD3t0mlxWeyOfOydJ","tlshash":"3c4294c8b6c6f47503d36670902f1106f23a6919b51d9480f72de9d2be7884ea237fb9","first_seen":"2025-04-15T10:15:48.992845Z","last_seen":"2026-07-23T08:12:22.182256Z","times_seen":2144,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/shopeepay.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.343Z","timestamp":1784743418343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/shopeepay.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2023\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-7e7\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacb94e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2023,"size_decoded":2424,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGB, non-interlaced","md5":"88ee3c3de20530fdebd55380c0f76975","sha1":"443fb03431bb1fcdae9b70816ad3e3e5b5451ba3","sha256":"ae697e7358c4929e5136d999f6bcdbff79022f4e7a16f2b90b1fe49c0a76f85a","sha512":"1fd9a6dd7b9bda93beba455a6f9fc0bce0152097c8e4101429d5b98e7c5f6fbaf00a997938dd32730f7e6821e4ea46cf752135870ed714ac45695b29e2881e9b","ssdeep":"","tlshash":"d1414e8f96498b03c007c75732af55a8272354a322f672871571574271cb3acc959127","first_seen":"2024-01-31T06:57:33Z","last_seen":"2026-07-22T22:49:40.945727Z","times_seen":512,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/WILD-BANDITO.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.851Z","timestamp":1784743418851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/WILD-BANDITO.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"dedf1f6bac7ce8d9d855f791cb437c47\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDB3BC14C\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ka1drtBHZNK%2BrxWrijjWU8kd5gN%2FOe8lrVY9ayM%2BEeP8SXtBHKv86ABdNTQURoqwd63MYRLTmP183q3vWIGtZ7tHh0m9zoRha4jlwCneR52wDXHx3XTQE0Uy7bNMRT%2B63R8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffceea5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45522\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45522,"size_decoded":46592,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"dedf1f6bac7ce8d9d855f791cb437c47","sha1":"bbcefb1bdc068e013d427f4cf434ddb99b36dae7","sha256":"e3821873f292ad33fd129f90c2f863d3fea141437b5221c5debd41bffab8f22e","sha512":"38f42ce20c90a920f219688dc031a3db01bdf3bf2296c683313e75aced5cee730fbb6ade63915c5ccf6d1e9301db8cf7c00fd982763dba5c77a6c9ff0dff20cf","ssdeep":"768:RnyDD4wsWbQeDAk3gJ7Dv++NUAl2qzyARI0uJVOBZ2gJJi5CbDwVYDJFU7FgJV5q:9zWs5kQNDm++6zyAy0KVS2wJNbmYgSDo","tlshash":"b113014af2d39b0d35a6d219000345fa98914587af77d8b08e0b3cb85e72d3fba6d253","first_seen":"2025-03-01T20:39:52.192056Z","last_seen":"2026-07-22T18:04:42.238354Z","times_seen":51,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/x3jgR3v/MISSOURI-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.329Z","timestamp":1784743419329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /x3jgR3v/MISSOURI-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 486497\r\nlast-modified: Mon, 07 Mar 2022 12:31:36 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486497,"size_decoded":486863,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"8fc8506bc50429da8f35e447110bd685","sha1":"3393037e8c028be3d914c09a06091913ea4b1498","sha256":"04e7a08ed3d51a5a730c7ae1f0f49b9db23dd9978c812e05a9161d42f046a7d2","sha512":"f6951e4432394315c5fc0fc80dc2a55df8621f6fe7f1b477621b149d9bafd579013797cd22be62655931854fafb855b6246a98fff62959785bcbb6af45c40136","ssdeep":"12288:wPOGFGT5ondBUZq7OiH2zRouo6vPI5d9RDQz7GH4uy+E:w/FGNon8qH2F46veVOCYuy5","tlshash":"cea4231ecb1f8e89e1667e30768bad8807310ac2fc96516ba4e35070740db7d4addf96","first_seen":"2025-10-30T11:45:25.886371Z","last_seen":"2026-07-22T18:04:42.436547Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":4208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/papua.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.338Z","timestamp":1784743418338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/papua.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 30413\r\nlast-modified: Wed, 06 Nov 2024 09:05:05 GMT\r\netag: \"672b3141-76cd\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcaca54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30413,"size_decoded":30816,"mime_type":"image/png","magic":"PNG image data, 1252 x 317, 8-bit/color RGBA, non-interlaced","md5":"6cbc160ec3de3faa63dbec8acecaf6a3","sha1":"862de85197163e4841f50b15c984199eb6cfdb44","sha256":"e267cbcdb2553f6f249b831c6312cbf4f4b1c64dfb09fa24fc7fe0910e1ad363","sha512":"c727e1fd1b7bdcd11b7ea647f3d7032f4740db0a9283af9884ea8595b1e50046d39cdb724c8cabb78c98fa410c7b677a76d854c55238de547c433f795b5655b6","ssdeep":"768:KxalB7heG9rYqSMZ/9FFSJBu412oVerAqoU5x:2c0qSkkQjoVe55x","tlshash":"e6d2c0526e77cef3fd030534ad8e4ff3618b544453f0dca5cee0990d46a3d50a1aaaaa","first_seen":"2024-12-15T06:15:26.070487Z","last_seen":"2026-07-22T22:49:40.908476Z","times_seen":374,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2FPREDIKSI%20TOGEL%20GIF.gif","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.938Z","timestamp":1784743418938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2FPREDIKSI%20TOGEL%20GIF.gif HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"b3430a04f57c9269041e94a5e7888709\"\r\nlast-modified: Mon, 26 Jan 2026 00:00:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBE01C98F78\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3k9TeNnlS%2BZtnL2mWKey8ORncnaEcLxbQvh5HchDuw2D4tLPUW%2BXUcNVOpPkJE4aaTUKKLWcDzsCOA6Ll3p%2F9l8%2BnIUnDhWoarKCw%2Fcd5zZnRlJV6D77JRN2E7A%2FbEtKHRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45d005eff5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 925095\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":925095,"size_decoded":926170,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 320","md5":"b3430a04f57c9269041e94a5e7888709","sha1":"276a94647b40e98f9454b8f6c45af6566e527dbf","sha256":"27db5710662139c3e2a7a9ad9b7ab7a70702ee0af44ae89ba26e90ebb59cf605","sha512":"3a60d9dcac238a34a918821947045c2c49021e1e5ac8f6a948d6a606982d7d29e7ba2e2af50b1a77f90e7ec8194e4f23251afeaea9bc2e9883dd7c0366b776d8","ssdeep":"24576:Ven1cORtLKEbUr+AWcZm0zlGxPoDBd/Ig0pW:A5tLKEhZc3D4FpW","tlshash":"1615338bcab9d504cc715874479820816d61ad4e2a7e31ffdba46f0b309b6cad2f197c","first_seen":"2026-07-03T14:18:17.196035Z","last_seen":"2026-07-22T18:04:42.394841Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/tMh1pGF/MARYLAND-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.322Z","timestamp":1784743419322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /tMh1pGF/MARYLAND-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 491823\r\nlast-modified: Mon, 07 Mar 2022 12:28:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/F5t8Dfm/TEXAS-DAY.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.381Z","timestamp":1784743419381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /F5t8Dfm/TEXAS-DAY.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 515937\r\nlast-modified: Mon, 07 Mar 2022 12:48:25 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/128f79a146dd/main.js?","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.461Z","timestamp":1784743419461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/128f79a146dd/main.js? HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=6XMJq8DUW2wXZq9s0.HW8X6IbC6SaMQ6DZX6abxFyg0-1784743419.2117984-1.0.1.1-X.JBJlqzTdLD41C5EQWNZwZz0_NSPfkfcPnEcdpfC1z_AIeOrfx_SOJhzhg3waMDG4ryzlmzZJgFegzOfq.gdyP2udFGM.g5Elmg9wEAgcGQfxZH_mSQXXZ8Gr4Lv.q6; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=R3G69xeMZ01z0S6LOgw5vuy2EWQ5qr_ZnaxyjtKJOR8-1784743419.4580207-1.0.1.1-HIKnRTC307cOnoulv_2672mCrmpupjajssCW1CxXDHmUViCRO1RdjIE.HKGhoLhSEVw0HDekPtQF_55Bw.nQifJLoxogm4escp1NCbDAIK5kfqd3dvMbNbBM2vPUAn5F; HttpOnly; SameSite=None; Secure; Path=/; Domain=balaptotoplay.com; Expires=Wed, 22 Jul 2026 18:33:39 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1f45d039ed64e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":21319,"size_decoded":10171,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (21319), with no line terminators","md5":"2d8d5604336e419fe07a20019ef31c75","sha1":"04c2b0493074f8562f2919f799863ab002959e20","sha256":"d3b7428acc3e8284652a8f2c1e285403a475d14e8f84cd4ee80433c8b2b12e7a","sha512":"6e317a70b64682a884f2e7ef122b7bf4ac06fabc7c26d2a645d602efa306dc19870f924fa75e9f77c94ae3f58d1cafa85656872f61c77d3740ceff680c34d2ac","ssdeep":"384:UZJaHnAF3V7mvtD9laOU1r8ZhR7wqWxbC7EW4c2HqIMmRRwa:I8nAF3WDPaOULqSRKIM+Rwa","tlshash":"9fa2d986b4c5f90413d27134103b36ef726ebcc866198648c1d48afc7db2bda9f66d49","first_seen":"2026-07-22T17:40:16.901191Z","last_seen":"2026-07-22T18:08:43.938851Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2FRTP%20SLOT%20GIF.gif","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.940Z","timestamp":1784743418940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2FRTP%20SLOT%20GIF.gif HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"a6e4462e832c127449e58030b931832e\"\r\nlast-modified: Mon, 26 Jan 2026 00:00:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBE01080F45\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 324\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1IaRi8fXt0LOQy7jTeQuJk973uk8h6%2F4vc34t2DLpZF%2BfDpL1JaCBkPiVgUdWqSO%2BpxFqykab4IOUaKs03va4larE9NQJpPh%2FwI9z0yxlRPrd6GmhKl5UtLVPETMasO%2BEc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45d005f015ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 599175\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599175,"size_decoded":600248,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 320","md5":"a6e4462e832c127449e58030b931832e","sha1":"d93233617b03c6b8c112ef96ced0eb0f1fdd9569","sha256":"d421480de779fb3ceaed1d18b311d1a1620f67dfb30bab8acd93bae435da6eb0","sha512":"ef71469144b53844063d66b9a48d8a34dcecad1a09e073332e480b347dded2e0bf79e84977c916e19f2cae5d330566a1baec9a4dcff2d728cf9f4de248f30de3","ssdeep":"12288:UOr/I6WbWL2ZL8WkvBjJB/RdHtwA5Ld6ys+KZvwg09yG7nqAV:UOEVbLsvBNdNJzyG7qo","tlshash":"7dd4233358076a45ee3388884ccb69bd0e64a64cf35e03536eb8c743776f6a8c4f9a55","first_seen":"2026-07-03T14:18:17.160435Z","last_seen":"2026-07-22T18:04:42.435836Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.190Z","timestamp":1784743418190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/nivo-lightbox.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-1cfc\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfba8f04e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7420,"size_decoded":2532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7420), with no line terminators","md5":"a5896459ad6790d1d94eb2180e59e965","sha1":"e5d4b0ef3a929aa6e20ede86b024264a8cf2b473","sha256":"65723a3f6bf46e95bd82bbbc3f986c0df44ad1b4427abbc3fa252a53ff40b4ea","sha512":"de291f580572eacf236b4b7a51824e06cabce1f0544a5e2c7edd60f5cc2716757eee71069a1dccc42037d1704e4433e732469c46b74ea690911010cc6e1f50b4","ssdeep":"96:RwsLo8zljjmeC8CVZfOTfqjf61R9WTE6F67A6f8r6Fk4zzdtMTnO:RwSPNPcfOTfY61zWAAS8r6TBtMTO","tlshash":"57e1420db351525046ef3567211ad334276a86ab8c41e0b6b36cc4d7a7ebf181d33e6d","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.155687Z","times_seen":2697,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.243Z","timestamp":1784743419243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a1f45d0239be4e4c-OSL\r\ncf-cache-status: DYNAMIC\r\nage: 0\r\ncache-control: public, s-maxage=900\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-cacheable: 1\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":107324,"size_decoded":18718,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2406), with CRLF, LF line terminators","md5":"99bbd01ed3d25724f7caa0baf5728262","sha1":"fba5388213f3049c895affe489d100198eab4edb","sha256":"dca0d1c648cca7c0459f81fc506144f319690916af32eb4e14ab570ab8f367dc","sha512":"18aa733793c1e28221fb871a9fd5a7a4ee6e3f3a22de7662d783d07d97bf06c34feb66cf8362a11b77d0afad04d876c1251f38c39dd42e2b9ede10bda11abb5b","ssdeep":"3072:tbS5sQMxg/NgKQ8POamQ8tUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUH:tbS5sQMxg/NgnsvIi","tlshash":"dda397b255e0202b130256e9bb56e35e6c5d8253cf07461473fc8a6e2f99de2cb1b36c","first_seen":"2026-07-22T18:04:38.858275Z","last_seen":"2026-07-22T18:04:38.858275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/ovo.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.334Z","timestamp":1784743418334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/ovo.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4578\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-11e2\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c864e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4578,"size_decoded":4980,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"9a8ceefca77b6a4f356bf139e59065b7","sha1":"fecb95c6ad2fddbcf2424b60a31503917c1cbc02","sha256":"71dfe3342d07e446916111fed9de1724bdde56c963c1b2573b7ec643e9f26e50","sha512":"eed75a8454ae4b3f6b926a1fb64124c1308f053d77c7d797767093a13430145cfaadbbfa4c85f971cf0339150077253a4b261f4d7cfd5d986fd854b7172981d9","ssdeep":"96:mZYR2M5uAeJqRaQ8IiwJ7k64Hx7iWtwopCUg2sl:mif0AeGaH4ivWC5g2sl","tlshash":"83919fc6eed04c4326afed21d3eda07967474c98dcf3b5623cfa88001d3a29446e9497","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.918519Z","times_seen":2095,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/css/shio_svg.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.131Z","timestamp":1784743418131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /css/shio_svg.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-97f\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb4f8a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2431,"size_decoded":880,"mime_type":"text/css","magic":"ASCII text","md5":"c40ec89e8a103f2e51b90dce6047474b","sha1":"d90eaeecc694d94c5883004e05ebfae4a6cbe846","sha256":"e01ff4e0e870caee450fc361c0393c4caf42514432c9e7425da4268a25f2d607","sha512":"99d21e9206a85fcf389900b7b91b391186ee98ff8b5f89dcd0a6152d12b0070bf09d7c4f634e5aa9a5bf851c910f2b8483ed70b99de99535ec7c3f05a9c5eba6","ssdeep":"","tlshash":"76412961809a670349226ab065dff791eb197356236cf23621e73084bbedf4cb91cc34","first_seen":"2023-11-21T03:40:41Z","last_seen":"2026-07-23T08:12:22.193676Z","times_seen":1187,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/text-rotator/css/simpletextrotator.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.114Z","timestamp":1784743418114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/css/simpletextrotator.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-b7a\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f374e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":912,"mime_type":"text/css","magic":"ASCII text, with very long lines (558)","md5":"2806c1be092ab58c3f85725925cc72f9","sha1":"e73429f735fd768dcdfb11551e36ed7ae5f95b1f","sha256":"c5e5cb1ccc179012ca2731f45675e69d4f18c6f49d42801176b3652e035d2e2b","sha512":"a4d42d3805a16cd11127e915375c61a2201db28d7f4204223df8f778a8fb5e1828f5994e4803086e0729f9aff52dd864a21c951e94e4d1273b51119cc2c180d5","ssdeep":"","tlshash":"3a51a7b65c9095cd893a8e08e7cd1fa9062dc3b218621d9e7306260b8dc7e6e53ac753","first_seen":"2023-12-02T05:19:17Z","last_seen":"2026-07-23T08:12:22.108933Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/fonts.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.118Z","timestamp":1784743418118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/fonts.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-c19\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f484e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3097,"size_decoded":1170,"mime_type":"text/css","magic":"CSV ASCII text","md5":"a747a96a40f0ff24cd9b22280dbe159c","sha1":"2456960193c27391c70fdc70d706d9ac389ce8dd","sha256":"2f03afce916625a8d6dc603bd5b678668051e0f16b992e6a816c1cdb216a99c1","sha512":"5aeff76275674c3c77e9d7c2bd54515e1a22fb04c6be9a3532370872d0b0bf9a7f3d1e543eabbf7900f3c654939312cac333aba4e54da11f454a0640e0d772a1","ssdeep":"","tlshash":"e451755901dee65a6aa30ac73a8ab704fd1e112a246cc553d52c7cbc8cd362f63c472e","first_seen":"2025-12-04T05:42:45.87578Z","last_seen":"2026-07-23T08:12:22.103277Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/banner/photo_2024-01-17_15-12-52.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.17.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.290Z","timestamp":1784743418290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:04:01 GMT","end":"Sun, 18 Oct 2026 13:04:00 GMT"},"fingerprint":{"sha1":"81:C9:4D:B9:5E:69:7A:B0:BF:EE:16:07:09:0E:5C:7A:19:5B:FA:21","sha256":"A6:A5:1F:B7:00:5E:82:4A:51:22:67:26:9A:31:62:12:42:05:FF:19:A8:2D:E6:63:9E:28:2A:DE:F2:EF:4B:25"}}},"request":{"raw":"GET /banner/image/banner/photo_2024-01-17_15-12-52.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65156\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Oct 2024 18:24:37 GMT\r\netag: \"6702d5e5-fe84\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 3908\r\nexpires: Wed, 22 Jul 2026 22:03:38 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1f45cfcbb190b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65156,"size_decoded":65558,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 805x372, components 3","md5":"c84e99b34e8b5b415e96b7e997b80ca9","sha1":"eda46315ea6490e9b6f6ed555d858e4a5985a51c","sha256":"494e58831398fac29d99b39418c070bd8a06f997c84b222a59003da9f0771168","sha512":"954338482ad65af3189c6c0b96e406fb87af1397ef797ad0331c2f4f06898cbf5a1557f20ed26d1ff23afbb80fbd04a472454a576c17cb0f8bc944269a1f30ab","ssdeep":"1536:qDhne6ppgmksYXzG3hCiVz6TszfJ+Pa1gM67ja71:qDVlpEX63AiVCszfJJ1xl1","tlshash":"4653026178279b53ee30f0bc94b43f7ab7533254eb005242a66f1a461b3474872deae2","first_seen":"2024-10-11T08:50:22.523538Z","last_seen":"2026-07-22T22:49:40.803012Z","times_seen":1164,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":12,"connect":16,"send":0,"wait":11,"receive":4,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-24dspin.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.305Z","timestamp":1784743418305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-24dspin.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5339\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-14db\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc6ba54e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5339,"size_decoded":5742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"97ce6779ea88d190219b696fdd95ad7c","sha1":"14d912aeee43d9c6cebaac1f3c59ea97f7fd364b","sha256":"bb33c75ebfea05c8a890cf324caa643447aff6ccc845cf1b6877d9d0ed214a61","sha512":"f51db55d747f74d9b831a82beb843775ae8a4b6c61c966e0b5366bdfbd65a76267e3a510075d50e8592561a63e92cd39e9908da7e305cf9810b22b9851b12276","ssdeep":"96:Ht193sZq+nJ+b1FVDlxInCZwQy1RUchyAT1CiIGuaXf126FJUQKbSbSbj:Ht193un0xHInT7U+yA1h3uaXfc6jgmmX","tlshash":"17b16bdee1ad8199f07944f849e0b1a85f1459370ee008f68abd0eb60c1a66fc1642db","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.866375Z","times_seen":2076,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.724Z","timestamp":1784743418724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 01:43:52 GMT\r\nexpires: Mon, 19 Jul 2027 01:43:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317986\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27400,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.107605Z","times_seen":2610,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/2d1KTGg/VIRGINIA-NIGHT.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.388Z","timestamp":1784743419388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /2d1KTGg/VIRGINIA-NIGHT.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 496415\r\nlast-modified: Mon, 07 Mar 2022 12:56:56 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/nivo-lightbox/css/themes/default/default.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.126Z","timestamp":1784743418126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/nivo-lightbox/css/themes/default/default.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-91f\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb4f7c4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2335,"size_decoded":1052,"mime_type":"text/css","magic":"ASCII text","md5":"701a1e3d0716ea44e6efca8e242164e5","sha1":"a38f953d2b470cf6de67c78ff8019a64b7263266","sha256":"61bf4f0d6d9585b0d12ec015e8ad0c0df1a7f0413a0e1195e2697f47a0a838d7","sha512":"298887a999a4d381355788e9ec4da1aaae7689d64befd3ee2b0fcaddfb91e3ca7b736c9a3906ce6da5762bb48171fe9cd506e8fc4f6f8312816e7f870c3ce73f","ssdeep":"","tlshash":"ce412a3a7754a14d71eea1133104d3b61b6d884ffe11357f46e9a4a3f6c309a8c23b91","first_seen":"2024-08-20T10:52:52.925472Z","last_seen":"2026-07-23T08:12:22.124769Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/json/quick_menus","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.219Z","timestamp":1784743419219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /json/quick_menus HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nX-CSRF-TOKEN: jGcyz4Lr5XD1YPt7Nt55MGE9qQqLx32xVbPu4hom\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nset-cookie: laravel_session=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%3D; path=/; httponly\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a1f45d02190f4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":1334,"mime_type":"application/json","magic":"JSON text data","md5":"1fa77036d847f76d9cff7102cd29a206","sha1":"f8bc54bea53933ca6d754568cc031e15ec00d16e","sha256":"55fbdd048c1ac04ca045f310a99f6c5cdeac15aa71a3588786ce2dbce7450c53","sha512":"38d3939b07f0ce7184121622e2eb9a9d21852f36b1ebaadccbe8cdaf7b4e96fc8f2e0b6deac34f9e59284cf5220525cb97b452909e8253f8ce151f8880e27d55","ssdeep":"","tlshash":"d0b012072803fc38a780a781f00c9db016d11211c306255140ddb49e93d8c96f1d712d","first_seen":"2026-07-03T14:18:17.1148Z","last_seen":"2026-07-22T18:04:42.340908Z","times_seen":3,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/56dTd1K/CALIFORNIA.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.304Z","timestamp":1784743419304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /56dTd1K/CALIFORNIA.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 485791\r\nlast-modified: Mon, 07 Mar 2022 12:17:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/vendor/animate/animate.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.106Z","timestamp":1784743418106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/vendor/animate/animate.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-b148\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb2ef44e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45384,"size_decoded":3746,"mime_type":"text/css","magic":"ASCII text, with very long lines (315)","md5":"26a9878d9daaeef756d1201c6f959433","sha1":"fee59b3065763a2df7b6b3853ea12879c42ba597","sha256":"bab20297b929ddb009abec49f15f4b403f5fffe086102090988ad701cb8eb273","sha512":"d524ad6568960b0d2634f8546ffad149762b6aa947ef1ea93386f67e3397def73b1f78ce95261c3be9d7d1251c34d57c870e954154090bac10e4b5daf8c709a6","ssdeep":"768:cB3GBIyOvdfwB1IAtkBDK3kyr5ErUe00QT2:mwB1IAtkBDK3kyr5ErUe00QT2","tlshash":"c313a5aa4ce1224494260e15cbdc9ba84b3cc76364b15cef3386384bc745bee23de657","first_seen":"2025-12-04T05:42:45.895074Z","last_seen":"2026-07-23T08:12:22.150661Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/style.js?v=1.0","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.207Z","timestamp":1784743418207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/style.js?v=1.0 HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-16de\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc95f4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":2586,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1126)","md5":"6174734545f4d0a24a22ae2f24526eaa","sha1":"969abdca32818ce8437a095b6c1e478d2bf70345","sha256":"d943adf3ed1dad80fb33a3380e56e5a584293f8d1694dbb6d5c5d1c6036ee406","sha512":"017d07cb8e391f853c7add6f7ecc503c09791b8a76a942bd51ecd55d203ab5d773bfdcc90b33f911ced9a4538f6d0e28f7141055449e2f9dfa29976b0cbfa955","ssdeep":"96:xEU393Bu563333G+3v+3tZYJWqr8xZMq038T4hfclwCBMkyZH:xEU393Bu56333R3m3s8xZMtMUhfewwMD","tlshash":"6ec1438ff251143505fb373a822f5b09af7f2a1a4945d124f0fb46a41f6c509a767e4c","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.136874Z","times_seen":2486,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/v4pyr3k/DELAWARE-NIGHT.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.307Z","timestamp":1784743419307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /v4pyr3k/DELAWARE-NIGHT.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 496385\r\nlast-modified: Mon, 07 Mar 2022 12:18:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/plentz/jquery-maskmoney@master/dist/jquery.maskMoney.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.451Z","timestamp":1784743419451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/plentz/jquery-maskmoney@master/dist/jquery.maskMoney.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"1b75-maXLu4wXXxa/NK031l+72i+Icj4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 24080\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nx-served-by: cache-fra-eddf8230230-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7029,"size_decoded":3435,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6807)","md5":"c1cc0aa647ec24abc3b39e93ec7acc12","sha1":"99a5cbbb8c175f16bf34ad37d65fbbda2f88723e","sha256":"1ed9cb1aef4522e2f5e0d67a387caf52e2101e1c58d94f113d9293e24581641e","sha512":"756d27c14865ea5181b0f76f724fb73701abbd7d8170d625c8b5d69b310fcd28ff7d09a71f28c3f5e7993da8c9504e45f467fa3a869523afb643ebc924cbbd7f","ssdeep":"96:2qQot/er6dNd1dzdVdCOdh5z1/ahxdZEF1ESlvphRF75TtVQXIK0dO6kO:2q1/erQzLZrCkh5oK1/vdhuXIn9kO","tlshash":"04e1a5acb16132eb57b721e650ef0312a2331b8828955080f106fdd27d74fd64377e6a","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-07-22T23:22:13.287086Z","times_seen":645,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":11,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-pools.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.300Z","timestamp":1784743418300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-pools.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6870\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-1ad6\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc5b844e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6870,"size_decoded":7273,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1b61fe941c5f21b6a5b2a0021304325e","sha1":"57e917596324667df9bb88ef7aaa181bfd53ae0a","sha256":"c1af05964be2562a6bbf7c1d8f2a19554198d2e2c1980454a2b8f61f307772ff","sha512":"9072ec7b6b3efd84f1ca7409fb97f312d1a5731ffb9e2211bfb94e459dc9d92c6a260ca5f19ab994cdaee99153a3ad17194b40c26cc7545cb6cc4fee6fc5934e","ssdeep":"192:obNAW9Q/ok/Z6oHEwnklyK63TzFlT+u6KUt8ICBtlyzos7PE:kA3dB6MEwnklyK63FlquYKBXyzosQ","tlshash":"5de19dbe213a9c21cde70b3f31b7dc018a44d855d06b69c996eb39903720085e4e9e3f","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.831944Z","times_seen":2100,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bankmaluku.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.347Z","timestamp":1784743418347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bankmaluku.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 117101\r\nlast-modified: Thu, 26 Dec 2024 08:30:06 GMT\r\netag: \"676d140e-1c96d\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacbf4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117101,"size_decoded":117506,"mime_type":"image/png","magic":"PNG image data, 1200 x 296, 8-bit/color RGBA, non-interlaced","md5":"6de22bdbd5a96c65138aaa726ab332da","sha1":"40a7a5cf728d55bd50a2ec60f6e7433cb2b12385","sha256":"41cf483781e0d93bbc94dda097d93eef266d5e6198bf7af5011d90f0a92a0aa7","sha512":"ee0fb6a82a697e8b348b91876d83d773c86bffae3e58740868044a11b77bd76c341f3960b6f82dd30edb3f3c9585c43fb7610eec375d044a69d93d4a35130a99","ssdeep":"3072:tXGJP//Yhk+u+YB2sYxhhSQBUYSZ+45cGYUNg/2iYTskwS:tXs/r+u+K2lxhhSQyET/+iHkwS","tlshash":"f2b312530c2d2d0ecb8f1496e5315c13a9e68cfc939b4e65a1c66be07cb3b443d8582b","first_seen":"2025-03-10T01:18:36.810097Z","last_seen":"2026-07-22T22:49:40.833055Z","times_seen":109,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/dbs.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.359Z","timestamp":1784743418359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/dbs.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 35293\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-89dd\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcbcf94e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35293,"size_decoded":35696,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"14fb500fa5ba37f8806d526bf2e2ad8d","sha1":"83a792e6eb5e2d34fd01c32bbe780e3156173b40","sha256":"504f256603ff616123a2d082f00c5df2ea9949bff15e19ae656191e454db877a","sha512":"65956bd21a5be6436e88570b4de18b2288f9a48355247784166dfee78a664250cc50fba09283464c56f3749fd36e783268fed5d8d319a29cb0068f3e1307f82a","ssdeep":"768:qDSJ/oT+FlRyNoxfbL5MN51qBCpo+XHVmbebiUTW72Gyb:PJoTYPzW51YCpbXwCW7Kb","tlshash":"60f2e1e476ce4f09fcd84174059484d5fdbbba7a1741e1c24c878aa3a8870c9774ac57","first_seen":"2025-03-10T01:18:36.778808Z","last_seen":"2026-07-22T22:49:40.892164Z","times_seen":127,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/BALAPTOTO_Page%20Dekstop.jpg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.536Z","timestamp":1784743418536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/BALAPTOTO_Page%20Dekstop.jpg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\naccept-ranges: bytes\r\netag: \"cc4fd9cc7a538c7513a61c5e4b851477\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C4AEAED1C56767\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFKWFT9YZvTrmYbT14NcKBl%2FJ4%2FjHC1f6MW828bgLKeDvvMUrb%2Fmrpva1GvkjfO26%2BAb%2BSMYS4rPHrbcArVMDUh2coqsNVy7IsOxgKOHBhTKMNLRWGJm%2B3wfLx0ndJjUCHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cfdde8a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2414571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2414571,"size_decoded":2415644,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.0 (20241002.m.2795 6abd5cf)  (Windows), datetime=2024:10:31 11:28:43], baseline, precision 8, 1920x927, components 3","md5":"baabd21b3947b06f37bd3adfebe999e3","sha1":"93ea3e0b4d5f1e93a446002965eb302b5cdd97e5","sha256":"9484f238d4ba78521bc395db0d0f866c67867e448491ea0f20445c0374a982d7","sha512":"1dd90e01ed6c05b7a7c2418088d5ec45265934e27e0eddb058d052227b2c80b8dc6e22dab30b872fc8e46fdf4ebd636771f7b4a91b4dae5bee89aa32cb258d73","ssdeep":"24576:s1RaB3/FV1VJp7Ohzu1zEimFO85WFF2NkoSPQheK5u2N2QqE:sraBvdF6uw9f5SdPQheK0LE","tlshash":"212523b2d6495c7fe8ad3ab8d0d8d75783be1483d6aea0c8f09e58436b993607f1c441","first_seen":"2025-08-23T09:20:00.487632Z","last_seen":"2026-07-22T18:04:42.243697Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1053,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/k31CHwT/HONGKONG.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.288Z","timestamp":1784743419288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /k31CHwT/HONGKONG.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 516790\r\nlast-modified: Mon, 07 Mar 2022 11:39:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516790,"size_decoded":517156,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"71a089a9b6f2fc5475be9bf72306f6a9","sha1":"c398c8e1894050401b1aaf5bf89e1503ad1d6e14","sha256":"7e8f5a13f2ef94c9a4e61976ffb0b66053ec0d8d0cc5c4f7f74d771e36865ab1","sha512":"73b4233f979754084e7d33978f0452e8369796b1d3f7ffc40c68d9fe365210ccfa5f5dd774356cff21cd6523d6d025bd0fbcac69f9035102631918fd931ce151","ssdeep":"12288:sDvFmjQKJeS7Vrdi6WSUnwQQSSAbI5lw/8oMfoYE:imjQKJl2/zn2o05lw/8oMfw","tlshash":"7bb4229fd92a4ccff1bb28723c4b3f05051c79e68d98d591c8cc716ab41ba6e866c316","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.218887Z","times_seen":11,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":379,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/ZXTzSMQ/VIRGINIA-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.387Z","timestamp":1784743419387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /ZXTzSMQ/VIRGINIA-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 491883\r\nlast-modified: Mon, 07 Mar 2022 12:56:24 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/128f79a146dd/0.12282256774127454:1784739636:bQFTXXngdSOq4N-Vzxa9-OnQaCVLGcBveq_88Ys-HUs/a1f45cf72e794e4c","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.634Z","timestamp":1784743419634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/128f79a146dd/0.12282256774127454:1784739636:bQFTXXngdSOq4N-Vzxa9-OnQaCVLGcBveq_88Ys-HUs/a1f45cf72e794e4c HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13823\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=R3G69xeMZ01z0S6LOgw5vuy2EWQ5qr_ZnaxyjtKJOR8-1784743419.4580207-1.0.1.1-HIKnRTC307cOnoulv_2672mCrmpupjajssCW1CxXDHmUViCRO1RdjIE.HKGhoLhSEVw0HDekPtQF_55Bw.nQifJLoxogm4escp1NCbDAIK5kfqd3dvMbNbBM2vPUAn5F; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ; laravel_session=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%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13823,"data":"j5d8es$oQHG1bbAQjeXl6R5f+eDx2vWY1dCZCerfPUUSRnQxViktE-phRQMdrj9DL2iMmUIfOxIukb1F4CQq$DCF1OOATFowDGSocuJZuXSFjWU9PTqG4tGjeWqa4ZdA5X$O13Oj3a8j8zkBIPegp8AOUn$daVu8d4MFqrTcBpPDsQK14yPcTK6u4XTB3twP9HFCAZbY54p0unObVo3OazWjHBt9tvS-ee+bJI884bRAyb$8UygFEze1Dvwhnp6plXRP0V$+B95IJbKo3rAlLOkV3JECcO6adyU$lHzmzWJUCItWCnjbf2uGgycMmlylqc3ga8TKucoG+98gPQT6-mHZRmfum-wjWslaeU+6fJE+E4Y6VmbE65u9IVqDmnAGQylD0TmgnHHBStFb6tV4HzTtkzj1bmwfcy1EkoERYysUkvACFrtmV$ZK5uuqQ8s$WoDovex0T4e2LWp$BBW5b9FK08mYaqqLrYjwlubrmqk9iDTDCJ9csMgLl$W6Q1bIIMLkTWS78nKdJ-p-1aEqLGYE3A8T5DUp34ypUZ4KlR9pr0$H$SnQhQyeL14CJyw1qSXvo2b8ZRSb7IXmu-QMmgnRhv-35cPmWjc$ZAdHQwh2Pn57ehopEhCmwryXUH0sTyQMupFM7Om71W5EgRyuKCUH3BK8-AHGXQSDUzsz9kaLKsivAZyPeTvK-9msoPy$07Ww+GxRScEiaKPpl7r37X9dXyxeduexn0Q7rFMeEu5hFIDbgmDAtihraFvQZiKwwUsnard$VOnJ8+TsMCu27yFMRvD3xc08gP4uLSVeRu56ZjjhUKbWawpgbV$H4iWIcrKtKrZXKls-zembBxWFSjoXD8gr843RmkPWCu$CmkzxHEWMP5h3ShcmAjiqJxH3$Q2Y6nsx87j2pmllsaJmPZ$oZ-6EIXK3jvk7VUdzu08lg4hSJZv6UxGZGxRfqTluwwl373AGlfQkr+uPIQimyJS5CPe1rF0CYunLHZpKxyF0+JpH5YjJfRk2QLhQOBkQc0ncoML+mCZGHdPV5kbvIxeEfFgjsz62HGU3RUPGzpO9stwxBkETpKyzAkT8x6lwQOB7O2QiyUnUuYH11I$+zZ$Oa7T-2cDl4wLjFwa-X3uq1COzfCcgjRXQ1uSPdPtu28jLcpfA6GkU3C0j6kiGJE1ucZgGcq7PXFhLc6sAnJ4C6adM5CvHqK+cna2uq5lKxxE8fhOHk2YZT6d0-t4KexY1v1VJ$rKGzhBteiyo6C6d3boHUZ946iBd3Swji+GsYf81M0+R3n-Vyd1Kcxeu5F-TR1li8ehv62UGw$oFjPd36Rx19FvMCZEIzd0cOcTR7m+uJ3aa6owaCbafFCChGYZ4gRdZ8yKPvAYY7TRk+ZIQHFYtVdtI2tonSMlU9XDBUtOigjRizraMgA6awC25K$cJf+FmwymCuIChpJkVOftxLxnHQCUdLhwGLhyggIuCyF2P0TSd$CzDbyzjg+1hQGytmw7Jbkqq+xIejdOhBAIPfKH1ojqgYytJ7hDCnEtl+wlP+YwUlSEWhlAUR6SfEy-Pssywa3CsYUJug9L97t7tsE2WC7yZC9RzFr4qRopR13jU3dSvFhSLqZrOW1GC7UBamA6UQ8YdvCYzS$HlcOLVfsY7a-RJazKXv+jEQsZjYbrhfE4LrYHhy9hFzhEGC2Y7D9Rl1r86WZ1pdfbCkOy-7Akw3ZJDB765ltcHWJExlqx8uWCP2D4QUsMyYoZpz5jy9WRALOMjbY9IiZU3vVoDyQjLPm9RSf3oWiB1lgKlpqgJw0qraS3axPBV130bXw6dqXSQyBEPtPVViYwiBKiSnfcty5kiw2wJOHg+kuqLOB92zx-IYaA8rsFmmf0wjRBT-sD22iBIU27Zx$VZl2KzC31DnR1CXvaK54lIU4n8khQiLi+1imsDvRc1VH$O8w+TJWqojZW3HW8GzDS3K5UeUgASwYQe-JJYMPx-IEAFK64cB7jmJttDz2FAfCn6gwUZu$M-3vw7OmoZDfs34WVAYuy5IHrEhqnMa-oKuuoqf7UYFn0Zxdg4n33rTPviVC47j410xcvz7uBVZsAlDyGfkPHbWJDeolRdoL78b$-qvy9zI6G1nyR2RJ4hgpzj$j-fV7TltTm8$BGdu9iSy$fWTrSzFZ1sPRnKyF9wdcSsYG++IOWuYSxvSYzv1RT2Jf7L9xqi21FCG8QqoUZmBdbWz2HK$Q$dboAXn4jB8$ofkRFYWihUQ-UPH0cbQxI3eQkowJBHQmH3tj2su-Iin1mBsxkkxUJlX-4oJr683ASdCexchpKCensHyvQUVvgFVWwtLdOdu9ndBiP3EdfmgtxZjn913te+mWPk+u63erFCzR7FbyrsjnLGi7DMR1Ku7Hd8gEQk4ab6gPEL5FevRLkIJRy$n$sHsyU-nC7Df99prR+gejg$pmjQ0Z5oJv-c9X2iT7a2YzlfhsC2cM871yIekAmeWOAfpxVploRZUQ6b3WJdeFf3brcJnZCFDyvR1O-BBEl-JxVSlkEWXL7$zLOU4jsd5mG97ohT9t98+glYhB6D10v-ffa6FUzKOKM5tRyBXROwyX7DXOSDFzY+Aamkp-kf1Zcwf1KuMCARE3QnSoCz1FCIC1iqBzcyk2FR0ARf7v5tLl6aX7+1mu-Kbpf3Mxbk8T8wkzL4YZj2yWcSB0CLmsfC2YoD0zoy1Lpn0atjueD7$FIr9I2GnTUYDlCLjbFZFot0c8RdlrFIR1jF$qVEO-ACLAOBKuYX4WQB2pPVgh6x+IKfLWk2sVIGdkisIBjyUHcmpDBHoi58dj0e2Yc0VLV-p+vTVtzFTX5wCzdMqsX1ZX9fChqWSEtBOiYuml-M8dM-5xH7Qgeal9dWY0ecWyQQSXt4zK2UQr-xOzmw8b757GIMAhnA5LpgYXBZ+1e7+4ZuXn-5p7D30cfohI6pDZgFhPDTIxULD-tU5tc5SolEpBsBiKP6iJGBM+z-7bP40u1tGG3B4oJwQR0pcd6GgFAwU5ikDRn60+xp6hR4KIyffZa5tkP2ogX91FMBlxziYhy5yGu72wrZVyiW$cAmfqKe7tsj1GxCzViw8r-sj9eyPf8MbgaBvJbKDSkBne-C--x8-TY1pVvVBKZc3Om7GqAHw8M5KeBJCeJQydmi1zXk88S0zxElMzJpLTE1lSS4hK4PZCQgFQ2791ZUUsOPx3RCuLDjF3fXTyI9ICG2OQu4sg6Ce$qcKQmtMbr9PngcRK571Vu9G+3BDwcXHbyS7+ifgUbKX0KxyxOUkn17F2C4Q0t3EDpAyKwmb1xO8r9XaGsDuVBaqsfKu04eZRADawBJe8F87ApBVgv2Vu0JnZhWnVMlyiQRYQ0wBBnKl+qM-pHDDml+hmX8670XmiC105YPm5Kx8sEIv3Ztt9g4TBcz+OVAisIb-TCdUSjTFBWFxi-Tq-yFyp91vp1UK+1BRXcFMW+LW7cW6dadcFPXVWiT4alCyA2-JgVDbE5ShfCnE9PZiyPcolE804FYSnHo5cowua3rjRcD09zoGWqV$Mt1OMJyOMK3lKedRlyZnl4lZLZi9f1ck0tnb8KGXWGSbPUELRL070JJgcIVMuPz1R5+jAzeks702uOyGo9bVpo5y3XP5ZGlAdjnKEVg-Gy85O9Qwdayts8z0XhoaqYnzlhApsvwYQ$rySMDYsk5lS87r98KbMxFeIeWPLSeQamLlCxAUJFoFu9od0gLHe8JjIcaLY9K2DwQch37gWYnVh7YFmI7CioYp6OfHtGWS3RvWvZtIR0fjjxxqgK6wAiDjOE3hV31H5crr8r6KVA$k+C3nVOt$zyCMcn+75q+xmKhZrvnh9YUlPZJdqt6AIa27Phsxhh39Pus2z6uPb$zHZvj7LKuHshfEyl6+mlvyCHJj0dT4i-JBdgBbOqBCtVCQpdv6SlXGZUkXWvy7BhBVEsmA8P4eoXSXdiKwdk64acZb39Htiw12SC4+KHAeDu4MVZ+G4UwAyuP6WWHUq$LcmnymWA-ZxE7TPy0u3mRPTYrikEft27q2lEHyqq4LFi$xYeCk$rK$2Dn-spnbfoMZpDpQuKccfzOQjKnIL8DDIBKmWe7H1iYPMV+rY6kRZmMUehmk67zz7XDxLhQtcrTOGJHe-H$R5IlEZsuLp06FQ-cj1kqpx1y22$c4Atpbbpo2EXMTD16bxwPg2Y$j2iJCctaB5qa35xKLBtEqe+ITqo4R9HRa8ePAbRDe6cqD8hmPUYbzhwM$ScQjGeYHnK9hD3a-hSU2LsC1QF3iZ+qSpcFmH1dyUga7Ad8WEAjFxGfk$H5K28PAQgo0hBq-6KgXiIsEW9Cqx59rVZv3TPfl9rRr3zoXSBR2g66Z8eyHrauMec7zMURTKXjWIRYCPg+xBCiihyduAOH0g3VXLsZZ1+FaRRG-iIs6dWmmje$ZqV-+8z1$yLlSXGHxVYQT2pqLhh7IQM26qRzyfZpg$OSdj83VOtReCvMHJvPF+gY8e8YaTYRYgTu1q3Tr7XrXoU$XPH0wlUk+06oOAMG-dbMhSlK90pUbjVsDxuE9G-AqeQTBnVUBmvdbxyZSjd3F5Z0jL6SDBFsA6KtDiHdyFK3jz1xMWJpK1ky031BkWF94tCEHpQ7OLXeul0vJE6RG7tJ0Grd39n+K5ymXSpg790yBW3FbD7zUiypGhHBjElkfZhqE$XaLryYdCxXErzZmPX9TzwcFcx$$fT77ABDwzO8YuKFAGKLTHwx3FltI8mXh9B2KA6vpcVLsPZbrww-1t7AD0nC8pUZAEX05x3AWBeq3pMykmdlYsm$lLJb9lQY9QeAmAk4e0c$yOwPbvHAozWm$IMCkrZ0JqQUqRqSuM8ucq7k7s-mL$IU6Dhbc4a$w9kCfX-YCDIHniZx5YHxHzcHf3e2y3Aa3JtgeaPdl3KF5HrR-CiQtCILfXbx6foK+ndmtTGL25jwYdIhQw2kjQPjKPZbRYKlC0pKs4-yJZ9MDLXtE+d63OdfXqMnJ4UP-OFiO4LatzLkv7J$am53uRpErkJeYXBzIZ5OPjmK+xQ2fO1Ihud1-IYdr-hgPZP-LH69dt2eU71ouFPEsyebIBP5BIYrZyyBqj$2tTQRx0h5M0qcle4m6DZWbJs$rXUzatDwtrgFsurHTdFAvZdAQPjy1heVbkI6tAeoQIUCwo8XWL655$qy9-jwXEGZe9wlt0dzlCg3WUhKmZv8MnFilmg1HQ1E5mqH-FvPnEcukVs$E6qajdh62+U-+QDXsa5Zkvko6M7dOr5eh-1gglRXyha$qm$39XGUqOp4y+F0zI0OzktzSpljny-F0UasuUkL9ZcI9YFavlwdymsC1+mlKAkqtvDv0jzT-0feQE6ad857PPc5MI8qU6WazVHX8XCmmIEI3g3EUp+4PiuqeHfsp7W19dqhbWdKM5XvhH8uJ7ujQlgMESVXVxGQaXhPKY4kQ9jys86jmJU5YC-tk+IBBBiaiTa-JQJhw1jlA-t8k2icPunL4D9Tx-yCBUKThaHyegUQVJwR-6xQCXEjJ3ZhWegtzLrfYfAWla7oF-ZCaVctdvk2xzC3cYf4xn4A9nV72$HGSF1ymTJX2FUy8SUoQIfIK9PVVLhOOAWIXnlth5w$30V0855G7km2+f02KlKGEvH7JEKSpDs2D+ZhpQKskFkUVcqmPUV5uoaYoyH5zBWg7JQ$$A$AWFn+9jjQxpQDDBihwGHuAYJ$4RV9sxjGUfLQLTg0IGqF2b-1x6$vZWWOJQGDDIWxynL3k5OV7YnwFvH3Tz5oPGl+mjUpq4rmIsUXAJeinz4AiiWTqCtOvROnSkdawU6V8So2Bj-H+WWl78qmHddd-eBRSRjx16Yx3Go306GUnDeZPD1LpBXUy8frjMc9WJLBMGHxYAsL3qV395$9bdWjvUsVvAPvwnCSzQx982VYuB6iMynsPRSdQDRMDyMn9a$WlH+-dVasFdo1HxXQtXF$iq$Q+aUWVkT-GyvCZtPr6rXwdgX5joEOETc489fCuHGYV92QiIlMr6ZvXkfG6bGzbri-nVhQB6JSO9wyoSSWB18zxFLjT35xdmujjXw4mteL5Gh3Bfamnk2jdMREvwVa4Sn9SYf-Ac8B$R5BtKGppD$ozAJ6MqYd8DlsW-HbdQ5d3F2AQ8x$HVf-KsnEPYcbFDYTTSUbKqgQX12lai1ijC7ZC2wIFZ1UsHS2U9LW0Stf5jzZPTsB0gXFtF9VX4Q9Sh147JS-SLlkOKZgeSm8bd$zmeoGFaekwXeLSyEt4jzOlYOu7c7PC9c25uMOld-vJZblI-z-mztfDK5gxH4sKJBZgSroGu8Iq2WxDG-TVv3$rgIeugUjBI87g1zLVIcc74dxDYHqrmlI37QTWxkLj6FCcXmq$b3w17XJ2-1zPxKpeTk0uJXwD9Khf8TYctxrWlvod44YM5KgCO5flE4Xg-afhRCFsA9$EQKwkSJGKGK3MUe4jHZVaba3MG5JGeGjFVc4K9O$p+$pDi0C-WAeex1IeqXzPljHdOw3cpgGSemZEd5rusD0DICkyUTiaemrf8CjMaxG3U4npHK9oLZP9uPsDo6EFk683JiPGDs6YA7CeSw910LyZp90yb4nVO07FOtM-i8Z-hdbGqr2b4iZMLShimld94h$AbxscC0Fj26+IxdFos83FC2IJ82tVYQFYGhvR73qYdhVPX+JuxptwFvCqHA+J52E6Sj5wH5fhJIS9rc9uMzeYZ3Lo84Vny4VOAb3t2GvG5nWp9pvJVnMei7EUBwnFUsM5bpK7LqPl43b9TzD-6qgEFPMbvgCnX5egqvqiF1zR0FVwJl8rp6UfjVZWmDUjDBinzW-GRsDibuD2vMgx-40OhzneKtpTMLEij$rau2$7VZeEuiDHpGAX7guTjXEwmQ-+8XE507yHsamqxjbsxuLMMdeR$PjLDW9UPbChZ-2aw0UF5gtuGcProCoL3QVoXf5bAaKcw1ux66Q1EeWJbDjlmKnuzAUVcW4ZBigIG7kryTmYYYngoKCWvmxzYd-rcFoTJqlpS70AhuF7hiEk2m$i193YRkUPkF107hXYjfMOTeE-7fuLOX-j1weMCEj2oV8wtznOe$m7rCYOIHmzwvEE4hldR6+M8-8E5-kV4daQJ5U1Zd4mV$1XhwJfcBOPJdcWdzuEdhP0GHR1QsrM7u2ZQPP0DSRYmWCGL-b05OXGT6J0ZA1-rr9CwnG01On2LOwqEUd2jbIDweeQTqa8ct7EmjBidbmw-BE0rIeUtWD+m4Bo1UrouE$rSXY2J2YHywbHQ0KyAv6+l6mpoxQ9rJKFA$Ugn8-Af8s7Lfb0bb+C3ti9QJ8+lu+6FwFhQ$ejOjMkYekHmPoHIXPcDyhVAvcMZAl3JuR2bZVPdQB4$XphF2J$7li$kwHExyZQIRPsBfpE1ZvsWmTe6DsijHAFsYE49M499D0rgF-LBn11l74xlQdHB6TIK3GBD5ZbILtt8kI3Qplf7bmeIvy8mAJW+zbf+PBZSeELyiXQXgTtkI0Br0xnzHBnJgaXSBRCwtA3SC8mvLS-ehSrprGK8PUM3xbM8e-A-dCq1tIwc$g6OEu1MioOrUI5fEt$G4-gw0zm+25lq7O3+1Q9G6EYsV+1qav92RVj5Do+lkLCEQG+uEFWp2q3yf6GsiDjkjAgZs87bS-vqhCziJXM7-GcnW2QvQ1mJ9aPV1F7sorg1AAzFyRA$wPfMCDd1viMIKeWDDlgnw5Dvy627OFPBcnV4o4agggnnn5CFiPRoy$2v9wxrH07XzKntk+q7FBb755s4i2lwTuP5AMyYPR2$fqjH5h8XmI-0iZrlD97Hkqc4rgOPsJfOMFsyH3yO3lzeG4hbOAJCha3e83dlx+UCaIyZnUiq924R9fDA9-$MiPhq9X$wJFWaJyWSxeRVOSgnDvb13J4UHDm+0IWDGhH72jp4dX3y1jEl5XEARGfqAmYb7r3SlpQwPHWGTfOmcOABBkQIEABQGWSi5tczw8c$1kaK4bB6Z$ux0g2ICf1ctRqM3hhLLLmomEJjcYIXR1z2JbPWIn8ec6jCIvgpv9+JAYqQBITGtm8Tf$MGa3pnSXYk7Qc2oIMy2d+3YcruWVmcsqaRkSAJHJ7WALhfuikuXDWKYyeoEoJXApyCJcDTjCuB6yLzsXUWJU--GxYJpcqtHS3LsfVpDtwxKl9T3yf4TbMMXa23EvehmfkGHUJWuSSUCxYRLE55fwkffxxWz34+g5rlVVJ2HOUFf6qlLIHfXMQZ977o5sQ54-hs7$TPPvYFYs9JX+3RxTtEqpqU33FXVpJ1ZDng3VK86GKhTlyo5lWFCsLgSlxgQ9a4bruUKYWLc7SmCaHzpgbZ6zndb$Ygj9hXpb+FPbr74cRhuGp5eD6oKf8W5uhhBjP4etDk-06OwJ6TYz$ZlJY55w72oLO-$FnsWuta+DmgYmJ3v+stm1y9Hc6-TaIkvsl34+wIGOQBDfL2vIJ7ssiT+DozrjmWUapoKB$Rj9vYHnmfWmbeFt-OSRPnqfr9L1CkUbrmGGYFluz-rorVcDbiSzbOQClj1K87$Yk+$mf8y8iOwOzPz7aJvmGi9XIkvjc1C1q9EiLJQwe-tIiYqp9bEQ1pG63vVOmIKOkS+uckuL$tfzcGxGrYFS3-hJ1utXRdBqfDzB$TEcZjeJ7Od9KKTMyhA7ctmBmxxbFYFDlESWcyemcCMwZM3Ip4HVsWIF6pOVrOMMmQAfOZuGkM$$F4jF1UU$WqO5SZtgeMM9QVxVI$G4RVMth1YOxT58h0hoJWcZIdea6$pBXsSBREC62x6p559ZcTdAGkwOx-dgVopMjUGU40riDoESm+tMkT-KhpCj4Ypc5IqqC1qZD71MExgkGCb93c5-GkKJr5zWKdr9GEHZWoa$EM3vyYbsDGshB$Qo4Z6UFG+SpZRyS31QkXp6tFI0f+Su93va$vOP4rsboyKuHZU24GrJCJswnb9IpZc7XQWu3fXhRxy8akgf6PzS2UyT1ikJRp2H11bQFClSZXISHIj+kXSThIrVzHJ1U81ELmm5zIsvVU3JxnPpPbVWJ$uZA69XrFYwrkAwe19HIlorLv3DDM0$B4s8ZSkzecAPTe9bjZjHVxKGWPjQPzMIj7ZYKuYWCEe7wqy074oqvEQ3d9AQTzHf+B7JDm81FT+e0HbLm+wEmJ-ma$kSbjRTuHhMbPkJyl8hHlVCpRLysBKpUV6cQM9yVqbSPzW+mB38rbP+-iE-js6UzCZHqlDn$8wmQcm-sHsyOL3pjBr6UqUYwwazuIPZ22FFBYRZd3-vHOFl8ho0pbVgm7KMC4a97txaK7HAmCk$Oh4jqlLeOAI1oK0UQr8eT+53vkJ+MwCqxk0afrc8e4Pqz-fFY697vzaRMJfzLKgPqlC8aDDZ+egqmLjxbIDKA1S-loSSWRkUCQ+evXp5k$WGy$9LgYgbM7E7sUCnlOr6L1vu+GWEXz32sojm$w01uES89udrDMHiwCGeUWtW-lw-x8Y3tn31lD0a5CoaHPt5HC3rn94uMzxCO7lE19Kg+7j9BK8$ovw3XM-fTIcqxSb$3fbX91zv6IxgVgHfrc3DD2MFzS1u9CayvZy5cUOSzq$XZnAjlYtQ7$jxzFRuhXfRfeBhD59iOOVJB2PkYT5fP$IzEeMPvpsKgRXfTjQldViL52Dpk+9fqPLbV5tas+snWy4QRG0K0gkYKditr-CmsbgRPJqlZZ3J2YgMCbX0xPp7uGnjceBugzUtjMKCdcOfoXn0F-y2uk9qeVvod3$OtfQp80uWi0RU13PRjceuortjcp118hzXu0iW+V-XpvpCVUdPVVWndTR5meJpBM-WJZ3ZdUjKYFYo1lBcsVWwzMdQCXH5VYdjEKRgl7qfUE$tqUfMA9-TCvCi5sHCOl6FhAxUE$-lyknGikC9Bktv0jbr$aOMb40HxAyxzaCZh8dqnVtEW3pBnpJ-gqB0OHtG1KUiF4PjO+SP-KEMEhsGVxF05X9eUmqa$COlpUnf-bccXljQs8Kaq+yL0hlgAcFI4HlcVZemWTl$Hz9jhFaombmZw9zuYL4L3VkdrcGquI3y$ex9FliIn-XCKPm05jHB3Eyj+efr2uBxEoFsGXLu9G3pOzCOCtxYKBEMxEnxQHlO-2iyMWhGRXxEg$SCy9RYjfHlEgmR+871y6lmhAaG7LKwqX6yH$5RayPSc1z9ktL9jxdSx6KkeitQtitSXJ54XhGLS8uqbZHzwjdfoqgqJq+OP7oEGt1vO3$oAbBG-JoHKigjDwZ7f0vLKI$r+WRpfndseUgohMlrc-QBnnZ43oBbeiabVRiZ1KoP-OLGuLCSSIIJBFkAtC3q4uIg3639EAiooVCqBUJ74vQ4-DeVp99KiFUfOI1gOH38BnlWfUgPqSP9yaH$sFtMM0hsFFqr3W+WP1-Z9IMtTQEAEhqaO0V-rRMY+pLo055txAscSnO23-HEE96D5YsDLliy855kF2Aj+KUx8ChOyarLFFpS1m0v2QGC6Mf2evkPqXtydJQaMadkcVIBrD4ei7Wy8icMz92sR2D3+yDM0BTrgn$Ri2yYCJWy6H4b2v+fHu478MW30kZjET$RkGqu-GXVL1MJesqUOX+kal8rzot-ESiK$d9HEma5qY26bVBZgxwX+6r1HMMLsoBfts4h+glf17ypqqaMwDtWrAYBRvIBcv462hwOMPoV-J11CQIigTI8zT6bjPbHWL1F+6krPBVOHpKToLWx$iaUZKK69FCcDw3-A2U68-YV$vQWBo2+0nnYej2Vgri80JJLzeMTxjH+e+LzXL2YdpcDoVjsyukeassEjhyLoIrQKqFqy7q+VbJQsK8c3Zsck1M6K48vTpjYZ1OBHwPraies$I0+bIT1dMie7qrWgcBriFgumJDO5tgaM5YzzKczMvpXUj5BQb9-F25OHu-5QdVQcL9QByQ9swe6e3qcMHGzIlo7U+WAoBr$MynGOJUtpfkaUcDbZQVfgu5pJdOJoP5lSOUFOac0acbIAjLIOsefzquZx70d2-Gcj3AGlF68w1KV4TZttLWpflM2pk1ln6ofxCQCqSGkPcZ3yn85CqktHCaaMUoH8WCySEcJibv2aj0eX+Vehj3kUnazvm7m895yOBI24UihX$ohq2sfvp2awSWHy6jsb-j6w3iT+7J6-iU3n2OfEoYqCCIPT5rQMZJXbUuJ-+VLSaI1Mg52vJwAg0tedhiU$0mfeGq5TbDFVYpbk9uj56f4n5msI26yDIm9SO3AeXneFIL2PhL8KS4g$gCjGyo$2PfkYYqrhbkJ9KJ3QJKs0RhdIME8CH4VesWkU$GW3kIpfVjrd7xICY$esWnjsweQXkk-drEm-1SLh41WHgaY1hTmWnfOrKn+nOcazAmaLhg7I1MjIznARhZrslk5yv-yQccOCGvD69ETCLsEUkEEQI3VacD1AD$wUElaTJk9EJbX1lb+vxudWTXCsf6iy3yjb5zxJksgFjr8OUqVPncAJGGJ+dru3VEk-yffxUv$9-AAzS7bYM4ub1vxeKcvD$mLL5BG$7nt92XYQJtFRQ55fGq9C7-CeXTJtJTnFkUQDWHqdk0tPTMkRKosTyDaBmnlxkkpeoiKptibDBKxKRzMYauKctaH2hHqwpO+cJ41m8sWAjkc9yVjBBGyMqgI+9SnObJqUeBVsjQoJjIApPryb4x7LOAxV1Oes93CwyKtcKV18tRYVvg7mRxPtCc4OAnuKFMLl+oiezF33peT1vcgfl1$dhCzYx-goCJoPmSKVxW7XB4oVtcb2AExgFnBJ26PT6-xrEjH4Yo+x0mfX2rsy1G4lbaZQ+$leu1zYZH-Gs48psBEA3JCXpC640VU0mD4Vg+TlS9yTCU0IdbEy3tqQKWVrrghplDMiRXrmBIWd0W4eBDPguzUUuUygbGE7Yn+aVvlqRhlJ+Rc574WtkD+K7U8CJY$y9l5OoJYDekYaiIK3Ibgr1ghYWvFcyAYA6njjz2vwHD-BuLb4jr9EitUW729xlHK6nx6SSsT+1ie61G$-dXemitveMqtPy4Hdc9Wi+wbrQTi6KsZPP1DueJs68116bR7Q1LbM9n25yMBJfd$PfaQ89dVHI$yiJiY3p$-$2yqhVVcsf9tuivifTz0A5oriwZknE5D3R$eHis$U4Qdn0mF9nKtv1IT3-wMI4J5p4QTHfX7kgEcOMALdy7uAk2nGVrm+UQrjMDLtdArHLXhoA3550Rme$aygJ6-ob5LFUFOUoVDjt-P--dL2jukKq780zxKCWsP4oibw2pIVPQtSt4kU$JUFsGVTFLUP-GlDp-9hrGRtl8wzbpre$k5xZiaLiI-HdesPfG7yhm3FnqqkoIH+B$bWrko9ynGVdH3aGzWfMqLATrk3rdJD7$wMZ6lypdMGUI5iFb3W0vn50O65$1$4MtGrVcMkWQFY231Xpczmuc+VLmKbmRbv6-9tvLKlt7eJ$0AIbbWshCyWKUI2JLXAMon1j7-zmD0ti3vz7z56sVta1VH7yDy3PJ1U5nQtku-tueK$9tt1UfQbCeMcPCO$eEjoWMa9Jd$-9+kB2z57g3o2w2mEgRXznvfYZ5dBlCkVSYCSRrt07a3GPznwv+q8sJWnjFQcHsWajZLOj1ciPgmib4EDIRu3KbOIa-90PpCHlTwHb54xRgR1ew7SOuO+kpyhPCOeIPrHWVc9ew9b4zyDDcB$EvH2+jJly$g4oROK3vW1kk3VWUTHkA+tDTD109cIxiFZ$GgM1+1hRTxEC6dzliXDFl$57Vxv1gTceHGTjT2ZlybFPKRK0RDFYknArVj2Iro$j13nGRX0gUr9JWcs9R6bUd7l-D1P2krGUjDGYDtLrjsihoY7U8VqPI3qWy9st1CvrcAdqTWqZsUcMjodxT3$v19JG1Dg2x2Oe6LQ-X1MOd4F4kKQvDeXrDvB1iMAYK1Wgn5EyMch6bs805c5VyPQh9FmZLQuCDCTq9Cka9FTrsSuakiKDcGyR0o-V$s8oQyM25eJM3CLybSQSjRIkhW4Ua4EF0Br7ruXSqy5laRFdZ0VPl7WU8PolTkgofFlcYpm991iIoEknbRDHdXfDE4RYllD0YX1Ebirun5of69RkA8Clk8rQ4dBTHkW-geIOSKRsV++A+SDFsKs$5O15wQFPWOIF3V1mh169TALClBYkL$VGzOHet7-XFKUO+InzprI7t1Hjy2zQA$Ub+eGSJq3LfWjCLiRgtsYlDKhB-X-JaixGx0ZSKjLJzkY3fPjybIC1oC+JmEdt+hi8pfYPrWIX3rOGm+MAuny11w3u$O+hqjK29KEz6fa5TkSe8RoAIRRd7HrK31ip$9B74Z2tBYlOkjt7+wHdljpctC30f7u-1tXGwqWOznW3-w0BiuZ7kDj1umJD7MVB$lzGJtwVVBV-$Lb0mY13OjxJJVKq++UoUUL6a-SRsjX9lVd7CEzyjrvOzIaDO8$oAx35egq3LyjPpeqhhGBecjbUu-q4VWtjw0PrGEbzz+ML33Ke9IElO87KQg1JiiCyeAucr$LQJu4rM8YdyaKUD5rx$VIAhQjH7yE7yQe+k+KvUHmYpPk+9h4FO5az4+z58um7FgCgOfxgQTH7aPM6DwBGU-4WV+6EslBzMJ8P6zlM795ZrWexy7R9YVm6hs6cnRCy46kac9fOkRdF6G9s0JB1dE4-2yCMQ7f95FHMsTM5-mrcF966VSVlC5fhCbqVK-Sss999fcihBK4LxLO4wORS9YM87DB5$mLtJqbwj0$W7ycuSfr+pJDswf+oVu-4rmDkqfM2TREBMentUYOQRxBpgK0ITgufK"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: kpK0UkeGDod4bBqf7eum+uDp+B3TfJ3v4ji7MPmoseisafbJi7IYFE2S1REcLrtitiSJJBKGBcnZYFhqxzhVNEDAcEJb+FsWQnc2XDPzdQdaZys+2YEPPa9mkYS7Fs5pLwYZiU5kILgKHaJcklRiagplZty1Hu5gdyob10kZVo73TGBBKxgCKvyoHeThdMfapYS/uwIsOgzFw2ZEd2g3PuAiTD4beVokrywj/aD+Fo1oPpDyitN13kKsPx+tkGe9pIaqsGtA+Az462a8UBH2kA==$jXgt5GYr3raskVuOQgGqzw==\r\ntiming-allow-origin: https://balaptotoplay.com\r\nset-cookie: cf_clearance=oWVdt04928XlW1p3qDOfywJX18uW94lRzABJVSkZejs-1784743419-1.2.1.1-VTUxIRnm4nUS72z_RbOjSgHNYkUDfuckBTY.ILzXJH8cFJ7akTHSffNyf0X7xqP9dsMzWd5wmbLw9bRC7E.lTKgtN3.aQorPERKZbLPRq784p0s.tkhaKnTIl6.QjTiSeHaWf7nElvWvCMNtxTRcoH65UFnxyxRWNPjm7SmI1px4w6RGY2ZxWDTGseLtGe.UVCjIwwBwv_MI5f1nSNenUulKU7v05tvEdiuQA5WZer9icFZTmmH.v.TALklR5SXTIL_f1NMWWyVFYxqoHTyKOM187TLHMO4KtWWJ5OISIQzWoaIhJVP2JoXwD6xgMWLL_JtM7SzHBLKKSz4UQ5ONNSSN1X2KheZ8XilzP9Md_us; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=balaptotoplay.com; Expires=Thu, 22 Jul 2027 18:03:39 GMT\n__cf_bm=6ctegqBKvFwwnQHb055QKqAZPLxNZO6byztBGI7bIgM-1784743419.6314957-1.0.1.1-z.pPO_0H254rfVHxv8HGFzo4fd1FDN__TvHw.XEqWWa1lJjdCBEaR8tCISkO5pjnRk8vVFmNkpIy9hzenR_8jsucbkplwzlfd9i4VOe3yZUgAur6Ac9hz4h1rdHHZP1y; HttpOnly; SameSite=None; Secure; Path=/; Domain=balaptotoplay.com; Expires=Wed, 22 Jul 2026 18:33:39 GMT\r\nserver: cloudflare\r\ncf-ray: a1f45d04bb424e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":17188,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/seabank.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.344Z","timestamp":1784743418344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/seabank.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1487\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-5cf\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacbb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":1888,"mime_type":"image/png","magic":"PNG image data, 132 x 42, 8-bit colormap, non-interlaced","md5":"a4ea5e627732180b9f7c4d1ae6c28d25","sha1":"675d858d52a0a67253fbf10b80388b5807258026","sha256":"ff37442401121b3907208d7085ff13bec864479e93a4e157e40d2c1abba65f44","sha512":"2c268fd2376de90c280dcba69c69ed48bfadee564a44d4a728527e37b090b283476b437280396fee51c2674c92fc4fbacc42d25903842fc0bb76c1b6598de665","ssdeep":"","tlshash":"ce31c9a390b9a5d60558a2e00cda0536f11cef1fc0e01b95615d18be6cb45e7cdfc850","first_seen":"2024-04-27T15:45:17Z","last_seen":"2026-07-22T22:49:40.708319Z","times_seen":1208,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/bt-bg-06.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.837Z","timestamp":1784743418837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/bt-bg-06.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"063745f9b445739c9c4cd480c6238142\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0C85DCA1B\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20813\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7pUpMHZdr1rAkSeW4LEvnDZg%2FoHs8dNSPLe9zL0JUM1wkX2eAvuxH1qy1Tr3m3AbIKDCfyr5KEKrhGNny0f7qoC4D8xEX9LLor4qP7lwgGvV9b5WZMsHOCDZIdEDa%2FqVv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffbed85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 378892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378892,"size_decoded":379959,"mime_type":"image/png","magic":"PNG image data, 640 x 366, 8-bit/color RGBA, non-interlaced","md5":"063745f9b445739c9c4cd480c6238142","sha1":"efe61ee1d9da7ba30c20985a5e2af6c2a8b8a59b","sha256":"ca7e2c6e58ef1c3825c639f1588d2554cd3da3c45224e75627c1674969925d72","sha512":"060db42ae715ea0b707b306008a1b515e3960799c264254df9f82d98b61ba2d911c8d49d96caa223247eff43d2ef71ff7a7c42b156daad58cc540c6b5f60d86e","ssdeep":"6144:TSaXUKybfdNuShw/o4SCE99U7d5OMUmMR0VxiwQk8WRkMFDHPO+Q6pV:7XUKybfdNuShw/o4SF99U7d5I0vitwtJ","tlshash":"eb8423bff131aaef4a2ebd23d5f78e360b93926541274881f75d6ac6053f9805284b42","first_seen":"2025-10-30T11:45:25.779266Z","last_seen":"2026-07-22T18:04:42.223947Z","times_seen":8,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/4SLMHZk/GEORGIA-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.311Z","timestamp":1784743419311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /4SLMHZk/GEORGIA-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 506534\r\nlast-modified: Mon, 07 Mar 2022 12:21:02 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Mcdqrbn/GEORGIA-NIGHT.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.313Z","timestamp":1784743419313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /Mcdqrbn/GEORGIA-NIGHT.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 509964\r\nlast-modified: Mon, 07 Mar 2022 12:23:12 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.472Z","timestamp":1784743419472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 17605\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T12:46:13.077809Z","times_seen":243635,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/mobile/assets/img/loader.gif","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.264Z","timestamp":1784743418264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /mobile/assets/img/loader.gif HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nlast-modified: Fri, 19 May 2023 03:57:38 GMT\r\netag: \"6466f3b2-158d\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc1ab34e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":5919,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.117129Z","times_seen":2652,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/WgJJ8Pd/ILLINOIS-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.316Z","timestamp":1784743419316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /WgJJ8Pd/ILLINOIS-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 481959\r\nlast-modified: Mon, 07 Mar 2022 12:24:42 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":481959,"size_decoded":482325,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"fb6659f1fd5d8973b005b0df00aa0973","sha1":"598dc480855a76af43c9e6e30fec3792dbe11aee","sha256":"94c368981284f52c2141f27ae150b5c0a5536f409542059a89d30293490798b1","sha512":"4e407e402118749961cfc1690065545aacf46bb9ccf98a98bbda8f8c335dfa0e10245b0ab0d57ab10a0083b507a698027b18be3c3b3ffaa9ee88bf2c03d70551","ssdeep":"12288:ypxy0gs5OD2AX5xngUPFFyKcxhdVagHul1BylHHno:Yxy0gcODXPHFF/cxEgHupAo","tlshash":"6ea42326e72e98dca437bcb0b483e59e547846e7dd20c9b2c125f4f6721036d076eb86","first_seen":"2025-10-30T11:45:25.788966Z","last_seen":"2026-07-22T18:04:42.252008Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":4066,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/6FfscRJ/MASSACHU-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.325Z","timestamp":1784743419325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /6FfscRJ/MASSACHU-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 486614\r\nlast-modified: Mon, 07 Mar 2022 12:29:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":486614,"size_decoded":486980,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"54ab0fd5769e1aaec6af240d663db7ea","sha1":"2bb5117cc0ee0a3e4fd303d77a60a21e5e91cd39","sha256":"1492eb27f4b169ae5dbdd78a3431d0ff9be5acf32f92f396b2a23c8b9fed0f34","sha512":"68254f70df603e3b30889ceb4503cc080b6dacd1864f7f54fc2485d0e7d61c6b0d0a953b3ad4af4f189d1b3a9e376103d1cf6ae6ac2f68f99b5aba23a4276c34","ssdeep":"12288:Yu4xdGpMXRNVOqbqaeld4JFy4zWu8qTBrOxRTI6Xgh:jXpMX9ob5qTBasWW","tlshash":"62a4232ef30e9ccfd097bcf6ba1eed16512c0c94c8524423c5aabc74364729da5acb56","first_seen":"2025-10-30T11:45:25.750376Z","last_seen":"2026-07-22T18:04:42.220351Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4931,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":4186,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/PM2M8hs/TEXAS-NIGHT.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.385Z","timestamp":1784743419385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /PM2M8hs/TEXAS-NIGHT.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 518757\r\nlast-modified: Mon, 07 Mar 2022 12:55:47 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/light/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.595Z","timestamp":1784743419595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/light/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12181\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"1553f-KjbcKgoCLmsDhVcDssU4CDZ3Hms\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834915\r\nx-served-by: cache-fra-etou8220168-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87359,"size_decoded":12942,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d0c00e94901712da925ed893abcf1908","sha1":"2a36dc2a0a022e6b03855703b2c5380836771e6b","sha256":"f2e59699faaeee27da9edb86dd18f5ed3bd5113db3e4e388fdd23afcaf308865","sha512":"6cb3e110ea54d66ab7585f509c3bbdf019438b816cd78fba031c8bd40e8a013d55d01ab07869a00ddbe614bf348484411bd4cad166e64b6a90677bf6afcd92c6","ssdeep":"768:FxNC9RoWla5NQDGUfrIN1ENW/P40e/z96M8ftPxOPjqgA:FxNC9u1pUkNCo34jp6H","tlshash":"9083dee4f7fe18d09301d1e2a20aa761bb0da3249a462c58ca6379ed71e211dc7cf5dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-07-23T08:12:22.185394Z","times_seen":1943,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:40.049Z","timestamp":1784743420049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:17:21 GMT\r\nexpires: Thu, 22 Jul 2027 13:17:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nage: 17179\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26528,"size_decoded":27339,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.111559Z","times_seen":2539,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"104.18.11.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.294Z","timestamp":1784743418294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 11:39:54 GMT","end":"Sun, 18 Oct 2026 11:39:53 GMT"},"fingerprint":{"sha1":"79:BC:8C:EE:D5:F0:02:89:CC:61:D9:78:BC:FB:0E:FA:67:E9:1A:19","sha256":"B7:27:96:F4:9D:7C:33:8C:D3:69:FB:11:06:47:32:9F:8A:3D:D4:90:EB:5E:85:0A:35:B2:B2:64:81:6A:59:FF"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg\r\nserver: cloudflare\r\nage: 2988\r\nexpires: Wed, 22 Jul 2026 22:03:38 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1f45cfcfe10723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":88,"connect":1,"send":0,"wait":10,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/bt-bg-08.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.833Z","timestamp":1784743418833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/bt-bg-08.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"3cd14a6cc3c3646e341b01ab45b9c53b\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0AFA26978\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xvh8kOmGnJnl3BUcMpY4dADYoziDFTen5MR%2Fbz3M0EecuyYtHC%2BfNVzywiOLQsJ9G9EkJjAX6zl1kptse4vOtoaZ%2BviAyF%2FNcljdKMXI3ooscci44AWlpqOQ1ZeBFIrX51Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffaed55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 443668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443668,"size_decoded":444739,"mime_type":"image/png","magic":"PNG image data, 640 x 366, 8-bit/color RGBA, non-interlaced","md5":"3cd14a6cc3c3646e341b01ab45b9c53b","sha1":"63bf265a7d9c4e6344540847543b39298d8218f7","sha256":"b80940f0ae30991b5721736d5d959dc95983568fc4ae1774d9f797ee728e4e0b","sha512":"753c93fe38c42e8aa022cd32a522adbecde6b92e9af4b1b0a4babba6c8f3b13899e3e0adbc742b615c9cd3aaca740146905ade3a7edc1b1c9816c3ec57f73bc8","ssdeep":"12288:33P28RDY592RPYE6WbzSUenc9X8g0k7ZaTFORrI9//:33P2P592iE6WbzSUenc9M7UahOdC//","tlshash":"309423a64823116c5937a8a2e03ec63695d94ce0c9bcd055f26e754cfb38d82e47fce6","first_seen":"2025-10-30T11:45:25.891681Z","last_seen":"2026-07-22T18:04:42.17257Z","times_seen":8,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.154Z","timestamp":1784743418154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27938\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfcAlJTkjVC2Fc8zgpnw%2BhrvCbHSzgfakiJ2s6ndA1%2FMTbWuZ%2BZCyp7qz2QsHKLsi7o8QHsUuPVmKpOR6tlQ7K2BNX5Cua1%2B%2FLsaK7XMUUKybxbU7VkUbA4JYq%2B8Q%2F1bcKheHCqs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45cfb8b49a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":28951,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-23T12:29:34.696329Z","times_seen":493398,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-dice6.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.307Z","timestamp":1784743418307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-dice6.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5421\r\nlast-modified: Tue, 26 Mar 2024 08:45:04 GMT\r\netag: \"66028b10-152d\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc6ba74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5421,"size_decoded":5824,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"59818809868556332479b364aab8ea7f","sha1":"4027cbea0c7396fc1cb6dbc7b276392723cf8c9e","sha256":"d942e4f9b28cd8cfe2961f8a40919d77a8548e8341782c9c129bccfb87dee632","sha512":"ab2f3fd4af44c18594949d3e4b75578e6cd4a83ae7561adff6c4bd27619770ef89269119ad1d870102a4bac8bb30d4ca8d9e00f7a4473f10b6417678dd4ea86c","ssdeep":"96:M1R/idpPiPVliXwrGjUmubD4BZyzddkfAIwZG9wD/wqXt75P+s0ofnn+:g8/P+lO0G4mTZyzdSIIwZRzfXt1G","tlshash":"86b16ba06b45da1bffefe7330697cf00e7e48d6aac31871751bf520144bc5c45a86a18","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.736387Z","times_seen":2040,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"104.26.14.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.725Z","timestamp":1784743418725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 20:12:54 GMT","end":"Sun, 06 Sep 2026 21:12:38 GMT"},"fingerprint":{"sha1":"07:C8:9F:DA:64:FB:FB:E4:DC:47:AD:A1:0C:98:26:FD:23:EF:D7:68","sha256":"9D:99:FB:FE:9F:E4:63:AE:15:1D:D5:0B:D2:A0:CD:1A:EB:99:4A:5A:D5:F2:CC:E8:58:DD:F3:90:30:FB:9F:BE"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 26 May 2026 10:54:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqMYcuZ7lBvRIEp%2BYm2ZDeUYrfngFTJV9Mn4YmT0pyOZdi49JGDL%2BQL65hC3zvKjXwEZS7Jggu6HnavnxXO0E%2BKSDwbpCByxCH4QYrLMLCdI5FmhMkNhc3VQEFwWCRdN1Q%3D%3D\"}]}\r\nage: 3685386\r\ncf-cache-status: HIT\r\netag: W/\"6a157bf9-3e6\"\r\ncontent-encoding: br\r\ncf-ray: a1f45d12cc38c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":1310,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-07-23T07:12:05.387351Z","times_seen":1691,"resource_available":true,"data":null}},"time_used":3169,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":3157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.763Z","timestamp":1784743418763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/7m8l7TlFO-S3VkhHuR0at9Ih4imgI8P11RFo6YPCPC0.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28548\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 01:16:21 GMT\r\nexpires: Sat, 17 Jul 2027 01:16:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 492437\r\nlast-modified: Wed, 14 Jan 2015 22:48:57 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":28548,"size_decoded":29360,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28548, version 1.1","md5":"1c2236df616e20bd4894a174fb2d5225","sha1":"c6e64be68b173f9d89afd3510f6f57d42296d981","sha256":"dbba47796ddefcfa1570846cfb0787d2871d1db17db1b8ed5c821ceea061b489","sha512":"3e81edb83849eb3ad9045c450880ce3cf59db8469d63d3c8d6a8ebb3ab691087bfd147f9023440405af996c35e4f0392bf0fc8d9dd85b0b7524cd8d4f340739d","ssdeep":"768:RfXipjanPRICmNfAeAlIHbIp6i/Ww23zlK4qO0UJP:RfXipjGPSN8lIVw23zlK4qO0Ul","tlshash":"63d2f1af26412c03ce771df5cbb492612b1eee15da3d91eb9d9438279b0a4c860243f6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.742523Z","times_seen":2046,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/vbulletin_md5.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.865Z","timestamp":1784743418865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/vbulletin_md5.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-1639\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cffe8cb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5689,"size_decoded":2483,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2780)","md5":"1a28d5e018df6a763d8c43e320c82944","sha1":"718f3148bc0ebed7f32bf13cbd9766b098488fb5","sha256":"94a03d94ea079e4a5877a8d14914288246f30a12b3833c8d59ad22dffc63a7d1","sha512":"32e9914b734a44497c081172e5ec0acccac466b4a26b674c68caab856f99f275674a96dbb10d41a88f2d9ac2eb2f2c5bf3d4f84786b45e9af8597971f11e67b0","ssdeep":"96:aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMvzEAPwqJfAXYCfFQXE5JaGXC6rS:vOq0xvNJUNOqwqJIoCtCE5bIN","tlshash":"61c1fd40b781c17ad7bd8ef0bc4a1f4ef17edaa808065404b5b28edc4ded47944a9f1a","first_seen":"2023-03-14T18:52:00Z","last_seen":"2026-07-23T08:12:22.127833Z","times_seen":2518,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery-2.2.4.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.141Z","timestamp":1784743418141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/jquery-2.2.4.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-14e49\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5fc64e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85577,"size_decoded":30295,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"b354cc9d56a1da6b0c77604d1b153850","sha1":"a3d8479f4d4e39b131bc9a53bbf53d1fbaa23732","sha256":"fdce77a6d0053f32d231518a84a71bcab5c86045ed52369da00b89d4284aef46","sha512":"b6dcbe11a0f90ef61a071fdf7d8c637f95fc77969cffda9f291772b4fa2c2f9020eea2916da6f1113d746afeafbf592d0db79fb2f2f5400bc0a0fc10a066ba98","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a98Q:v4J+OlfOhWppCW6G9a98HrU","tlshash":"1783c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:06:18Z","last_seen":"2026-07-23T08:12:22.119841Z","times_seen":9087,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.759Z","timestamp":1784743418759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/Pru33qjShpZSmG3z6VYwnT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:17:21 GMT\r\nexpires: Thu, 22 Jul 2027 13:17:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 14 Jan 2015 22:46:57 GMT\r\ncontent-type: font/woff\r\nage: 17177\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26528,"size_decoded":27339,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26528, version 1.1","md5":"b20e0cef1fd0ee15a5fc0d150d4c9672","sha1":"7bef9051bf8ecdf269228c6e743dad5a8172aea7","sha256":"47a6d754139b198b90326c9ad8c22bd5e2ba5e2d7e2eeb443deed603255a611a","sha512":"cce8eb93332e18c5d4897c004ea1241f012cfa17da4f05ce87b3246e56274f9d561a4c2b49bada58f1d5d1d8f17db5a448e4bee78c0d8e3dd9a5047442d05b4a","ssdeep":"768:+fXipTa5SqjK1O4v/B7ddk/IxEjeRUVC8cy5zIQaqK7nP:+fXipTwf8/xc/20lcbP","tlshash":"e4c2e05f1bd2984df671483cc2bf5aa9f18053eb13ea7a745f925a1c22a15d50a032e3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.111559Z","times_seen":2539,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/bt-bg-11.jpeg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.830Z","timestamp":1784743418830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/bt-bg-11.jpeg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"a1ce7953b81a98e572b2eb35fd8fd7f0\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0C56BB6EE\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZHk5YtcyWfF5sS7Zm1%2Fejjs5udytM%2BEmXVgz684fKiH1nFXo9nxSjJcmqCMSDMMC%2BXYWCvsgwoc3kvXGjjGjgDRAi8ovH%2F1LfM%2B1%2Bce6dnUqr0msNH5rQA7sCFOiXsUkNM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffaed25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 83209\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83209,"size_decoded":84284,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x366, components 3","md5":"a1ce7953b81a98e572b2eb35fd8fd7f0","sha1":"6be188cf2f33c9a97be90027d6a1906157c4f1b4","sha256":"087d3271f4ae438b348dae2da15bb9ad5eba237de8efaa384697ec53f06e9cff","sha512":"ad568dd4c2dbd099d0f1b8fbd1f9a428d571c29674b19e0f6ae6ec7d9b44416ebb36290df308bc7f96b0d05859c6eeb7aaa0cb7571c133e6aae8e5f42b53d385","ssdeep":"1536:aE5NJNWyIu2+jwIz/n2dqxXvx/1ixrXWuMDxO3z4yzdf4d0YIx:ZnSDO9/n2dIMzb3zxdf4d01","tlshash":"838302cdaae45b7bf9972878d6ee9ad7c1d4fb0a2d62e01f2d417420c1dc38a41d1198","first_seen":"2025-10-30T11:45:25.730785Z","last_seen":"2026-07-22T18:04:42.101853Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/GATE-OF-OLYMPUS.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.838Z","timestamp":1784743418838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/GATE-OF-OLYMPUS.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"55e9edd195f511f9b2c7c649c0b517e3\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDA0B4DC0\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgnNpEq3PujQ1HZOZX%2Bnv2r9V3YYWxIFJBA6HhcmOU0lj79wj668Zb0M02vSy1o2rkYwnOJk0uOGkd%2FRQBsfUtCaLTBuGYzkB3voLv0FmJDWiTRwPML5i8Vk4542M3vE8pE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffbedb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44292,"size_decoded":45358,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"55e9edd195f511f9b2c7c649c0b517e3","sha1":"91bfe7f3d628f77fa9f9b5ddf9c6052488ea824a","sha256":"6d302de448bb57411abeb324795e96f89c86d29b2452d84bfa4b0b112e5d9853","sha512":"8229a7e49d1419fca141bd9a102f4cab66ba6d5b06c5b09d7de8da851317eb425166c8e0838248faa2d055d524200a96750ed2db75d0c07f33adc4bf5300c532","ssdeep":"768:nRJRIHxxxCFHxD34rbqSswSF1uA9KZK7bFft5eyWpTSQe+71SCvDeDF68Xi:nSHxv034HqLL1GZK39jeyWLpSCvDeZdy","tlshash":"7c13f14de13f125897295fc669873216118877ca45e0e2e2fcb22e126d37837ce4bf5a","first_seen":"2025-03-01T20:39:52.075121Z","last_seen":"2026-07-22T18:04:42.275543Z","times_seen":49,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/btn/logo.png?v=123","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.855Z","timestamp":1784743418855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/btn/logo.png?v=123 HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/assets/css/btn/btn2.css?v=iclg5ycncz2wd0elc7nb\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 26762\r\nlast-modified: Thu, 21 Sep 2023 05:50:51 GMT\r\netag: \"650bd9bb-688a\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cffd89a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26762,"size_decoded":27165,"mime_type":"image/png","magic":"PNG image data, 210 x 63, 8-bit/color RGBA, non-interlaced","md5":"058913036ff88a32ff13222c719e8c3d","sha1":"a145245e2b7cb6f484bd2931336eff48e0791c5f","sha256":"fce2d42a08e72a9e1ba56c74d997c5ef28129081d45ee3d3f1d44be3bab052fa","sha512":"6c049ff46649a0931b620250e9fb8a88501c35421bb28d97db52ecc737ea4403df956417e79dd82a4791480450709c0af06a0c6b95562ca517266b5080d66585","ssdeep":"768:kyQC1KwhAwM7kBlZ1h6qFk2VfZX7hv0XeYeddxK:kypxhGYHThuo1JdY","tlshash":"23c2d150bec041221604d6ca8ecaf43b7b7e7f2140a970773c49e65ba9399cd3d0aad2","first_seen":"2023-10-24T10:10:54Z","last_seen":"2026-07-22T18:04:42.148889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/bootstrap/bootstrap.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.181Z","timestamp":1784743418181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-7ba2\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb98cb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31650,"size_decoded":8861,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31650), with no line terminators","md5":"d08775b7d337d5f37e3fb102f1a8a913","sha1":"6cbd6f79def44d7e96d933a17967cd2afcf9ba3c","sha256":"8ae9a41def07afb4166b08e3143071437d1867e5f26e6bd907899a8b50bbafbb","sha512":"458415d96f8a83f130fdae57e3322c75b67269f4eb57494074e06b757eced0730c58ca73a8c65148c19b9126653ddcf66e3058426b921e1bd51c3b7369a5f05e","ssdeep":"768:poBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqc:qAr2MRCqc","tlshash":"b7e27446b230316107dfb2e5515f020b723a6a6dea06907c38b999f53db9c48727bf39","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.103987Z","times_seen":2815,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bri.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.321Z","timestamp":1784743418321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bri.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-410\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c554e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":1441,"mime_type":"image/png","magic":"PNG image data, 85 x 21, 8-bit colormap, non-interlaced","md5":"6dc0d7a52a5bbb2bbf4fa766d445632a","sha1":"5f3bf4eeb2065a5ada283143a629b5b6126350e5","sha256":"5cac9c4ea7470f69937f3e0c66643af243f022ba1d0d1b92ea0b891be8d3e708","sha512":"98cad2ab03707adc5edf39f059b76189db33e6fc89bb8f1877e837cdf7f4adaca09854cd7439bfafafc9be6c5f34f47b9a218b88718acbcd34b925c037c2d715","ssdeep":"","tlshash":"2811d8ca3912bc8cf07c485000a0621efb5c01e009137c26eeab5d5c54831054ad0e1d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.904094Z","times_seen":2103,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/V3kcg6r/SINGAPORE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.284Z","timestamp":1784743419284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /V3kcg6r/SINGAPORE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 511862\r\nlast-modified: Mon, 07 Mar 2022 11:35:42 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":511862,"size_decoded":512228,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"6cf0bcff1b813d8e586fd50025f3e122","sha1":"26022909d7d878b4ecc21f0db0a91c1ab8aa6c57","sha256":"1a3618581fb7d24e19ae57159f98fa0aa0d61a0b3288e5e0cd15dfb931a49758","sha512":"ddd3013d638a8fb028e01ad7249aea4541cfa6ec1b94e630493d3bae49a2cd8741ea00258318ae6f6133319c526b4ddda605f5164a541f1035672df25ca59fb1","ssdeep":"12288:Tv63ZtEbzJCnmY2qEgNgqZY/VqsF/eD6+3lWU6pY24jD:TEaCB2qNhYtH+3lWDeD","tlshash":"6db4230de47d5cd4b596bcb46807a1ae88751cfcd982c8b2e2b9fc05f9611bce49db01","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.118035Z","times_seen":11,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":3,"connect":272,"send":0,"wait":21,"receive":332,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/DMyLxKX/OREGON9.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.368Z","timestamp":1784743419368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /DMyLxKX/OREGON9.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 488514\r\nlast-modified: Mon, 07 Mar 2022 12:40:12 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GMjS1fw/TENNESE-MORNING.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.380Z","timestamp":1784743419380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /GMjS1fw/TENNESE-MORNING.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 511493\r\nlast-modified: Mon, 07 Mar 2022 12:47:51 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/text-rotator/jquery.simple-text-rotator.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.186Z","timestamp":1784743418186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/text-rotator/jquery.simple-text-rotator.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-df0\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfba8df4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3568,"size_decoded":1224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (377)","md5":"9964685a5509aabd8ab04dc6257d97f5","sha1":"927c58db28fb33c328a5a0bab4f9e3a93555f651","sha256":"95df7f4d192968c5c68e43a936016ad025fac7ce02a221a1bf13be6592667c30","sha512":"f58116f313f5d862f6f561383d60e0cef0056bb77013b9060b60e3a2a225fb2d55cb5691da77b5cd76ca10f71929f1697b267bde4ee489352efa3475f58ed279","ssdeep":"","tlshash":"d171e34a68fb48bdce3a91eb83ee1f56247909b28c006441139b5b7e08f19456bdde63","first_seen":"2023-10-15T16:21:25Z","last_seen":"2026-07-23T08:12:22.18049Z","times_seen":2459,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/jflickrfeed/jflickrfeed.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.194Z","timestamp":1784743418194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/jflickrfeed/jflickrfeed.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-5b6\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbb9144e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1462,"size_decoded":1091,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (425)","md5":"847c6b884e569004695666dd6e90fd0d","sha1":"0f83977484c914c85ba813adb9c46506baf4a83a","sha256":"796951855984fed308feec350d31ea2ac1382b2c6aec06412f9c33e1c13fe075","sha512":"1dd14e40e94dde8ab70b5d2e0293cda5f91376703dcc2d2a4b3174ffe270663a0448377c7b8334f2195222e8e3bad39d58e27314f4a59b077a26b8085bed450f","ssdeep":"","tlshash":"623122005c51a1fe16ebb7766d9f13380f318301c868ea52a7e6c171687b1cbe573d40","first_seen":"2023-03-08T15:52:17Z","last_seen":"2026-07-23T08:12:22.183992Z","times_seen":2463,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/permata.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.336Z","timestamp":1784743418336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/permata.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 6567\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-19a7\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcac984e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6567,"size_decoded":6969,"mime_type":"image/png","magic":"PNG image data, 400 x 102, 8-bit colormap, non-interlaced","md5":"f5f8c69e95909040ed44250cc3b86c35","sha1":"e333b452f22bcfd8368091118e301200e7f4f2b3","sha256":"bd3ce223941f0e46a5f2bf3a048f36d65b57a595d3dfb06762799d4c2b37121b","sha512":"3e58bedf161fb95bd4bdf89f95d224d1d68ce0d14de5556293074d188104dd75b4df27a8c84def1d61912b703e2041c0be82b25036124bde460f7e00c67781fd","ssdeep":"96:rV8AamRQJAK73Mj+vuR1Mz31Tgi5NlPiuwPvMXJp+b1IU3SZVaw/sJUt+sxczRw3:Z8Cy4q1fPkPvMX+IUkVaEoUt+sxqw3","tlshash":"2cd1aeff3698bcfaec63ac58c330bdc0463e6c91643714789d19c9506ec5998d080e97","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.741086Z","times_seen":1277,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/LUCKY-FORTUNE.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.843Z","timestamp":1784743418843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/LUCKY-FORTUNE.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"4be9656f189acab29f2d60a855b88fd1\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDA24EA01\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6v2dx3mT2ZVfR1jKPaMCdUHY00izguBBLzhHdYPsbZkYlo1kE4aooYnsLknDSnj%2B9SPhVd%2FPOOg5FEptBTfocyfqElAE6aExnk92ckAUg68RM6eW14Xgb%2FPOVS8644T2OeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43801\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43801,"size_decoded":44869,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"4be9656f189acab29f2d60a855b88fd1","sha1":"188efbdeb778d3377c377cf53207d048118ca030","sha256":"8eaae4e7fff8d483292861bb90454f4aa311d4b6e49a1ccaff740875f6d33403","sha512":"aecebce223defd8cf1dbd56cac0ddbc8d3c196ca504ff779ef4990d73a08ae17af52006d8acc370402ace23713f76fa845ca1f38e428d0792e05ea82b9171c32","ssdeep":"768:hZTVfVjhmBzP8CT8v0S07PKqCrLxTbVpKKWYUH7fQjpEIzc29EXGka:/x8D8CTRx7a3xTJcKWYK2E8u7a","tlshash":"2113f1d96d620316eeb42bba1f7a4eceb1309681da00e2d54ce4cce27b8650e50e4f53","first_seen":"2025-03-01T20:39:52.075871Z","last_seen":"2026-07-22T18:04:42.421755Z","times_seen":52,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.184Z","timestamp":1784743419184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@phosphor-icons/web HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 54\r\nlocation: /@phosphor-icons/web@2.1.2/src/index.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45d01fc895a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.470Z","timestamp":1784743419470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 17605\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T12:46:13.077809Z","times_seen":243635,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/regular/Phosphor.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.719Z","timestamp":1784743419719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/regular/Phosphor.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/regular/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 147380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"23fb4-DYFfFANzl8y/1I/l3775btbmYgU\"\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834339\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147380,"size_decoded":148107,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147380, version 1.0","md5":"527636c38907af87d10e6b15ac392648","sha1":"0d815f14037397ccbfd48fe5dfbef96ed6e66205","sha256":"c2ea45ea05ff5c7df1936770c104725f2a68f43fd343f35f3da23a30b27de32a","sha512":"e8e65252471cb9b85a3f03e128c3d504c7ea73a1123bc40b18dec46cd1b13da83a1313b1606b9a969cb9bb646bade289e5c8b5096a440505113e1652190d2511","ssdeep":"3072:AQbeiU5I7UJEmgfV57cK0jt6lvmT9QiyDsoEmmTHNAk5rsSbro:paF5DKXfVmKRxmKgmmTHNWS4","tlshash":"96e312840a514ca8d08167f795c42b1bdac69bb6f0b1e94d941f9eecd3bcf90f2d4a14","first_seen":"2024-07-01T20:12:46Z","last_seen":"2026-07-23T08:12:22.11769Z","times_seen":4639,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/defaultTheme.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.138Z","timestamp":1784743418138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/defaultTheme.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-649\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5fae4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609,"size_decoded":1066,"mime_type":"text/css","magic":"ASCII text","md5":"096e1a4593cd1657184db0c09bbd6938","sha1":"ccc0688d0ce0e0f8b93e141e912d4ba53fd6f1ad","sha256":"404e24f0cf7b62268f97128b89aabb41cfe3377f767bbbaf9455457d3e7b7f54","sha512":"c59d36cf6bf9d5b56af1ac7eadf167de125d229a911b5a65cd2fad03c83b7570cf474c58678bf83ca3abb809bd7d996bea4f8a6045fba0102d143ab407fb01c3","ssdeep":"","tlshash":"17317845dbff3803d05cd76da9dd69ba89344327a7970cfdea90c50c1b4012c09a6da0","first_seen":"2025-06-27T11:29:10.501891Z","last_seen":"2026-07-23T08:12:22.131249Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/dana.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.322Z","timestamp":1784743418322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/dana.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2233\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-8b9\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c654e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":2634,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"d4c86054bef770accb247693dce1184d","sha1":"215ae0206849177269831f7b9e433794b2ef80ea","sha256":"eb6f10f5452fd08234a524d21df41a6b9be1466c0c3acd39017951cd4122a3cf","sha512":"90e02eecfe4f198e6d5f18e6479781e9be9d3597f2d59ebc91a3659fdca1416db7fefc1daec550b95643809faf33433ba0409903f7c238517898f9905ddf25d3","ssdeep":"","tlshash":"2d410c6ef6816981607d8fd108ce614ace6348c4ca60f4a46cf6dd5f8b216958c188df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.710391Z","times_seen":2100,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/maybank.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.332Z","timestamp":1784743418332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/maybank.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 3174\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-c66\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c804e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3174,"size_decoded":3575,"mime_type":"image/png","magic":"PNG image data, 87 x 23, 8-bit/color RGBA, interlaced","md5":"9090309db1eed014753ae3b858b4084b","sha1":"a697395e709e693789bd82b2130b3c2ad3a4aa48","sha256":"09f4d88fdb291df0519ef0bf158f3308c71fe9a921e2cf11bf990bcf0b8380c0","sha512":"11f72d37a863239e5cf8f76b0c424681ca68676137fea4e88774bed3e0ed13230d3501ca94d065324cd34c8388ae6e9c96fb2b5c76090cab0f9851bd3287f654","ssdeep":"","tlshash":"53615c7ff9a54e908f1af3b125dd28b30b65c610b9e0fc45b9c9d06229641f065ccae3","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.934153Z","times_seen":978,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/hanabank.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.353Z","timestamp":1784743418353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/hanabank.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 60485\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-ec45\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcbce14e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60485,"size_decoded":60888,"mime_type":"image/png","magic":"PNG image data, 2560 x 561, 8-bit/color RGBA, non-interlaced","md5":"e4c996980adec7d141e24a7799894329","sha1":"df527934795f75a80a8faf80fa3173b7022b2e73","sha256":"c010d76676e129facad4d1c4b515f4dffa51d75ad7031ba5f15a8ff1b9a1fe03","sha512":"1272751eb6d4fc9450ae8dcb8e69674c65a36cea81d82f98aae21e55547770f8b60f5eb6a073fa2e24b48bef6ecc27fe78dde4a779219ca0893bd9fd4fe75ff3","ssdeep":"1536:+X6S06VixGMkyIzS6sOZeY3sjQUvoyvg6Gt:+XY60JhxOZeCsE4ozNt","tlshash":"7b4302e3ef5fbef5faa404319885e70b7e780ddaa15e56637730f0e4ea07a801658640","first_seen":"2025-03-10T01:18:36.773805Z","last_seen":"2026-07-22T18:04:42.383336Z","times_seen":108,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2FKELUHAN%20MEMBER%20GIF.gif","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.945Z","timestamp":1784743418945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2FKELUHAN%20MEMBER%20GIF.gif HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"81a7b50ccde75486002e89aedbf05d87\"\r\nlast-modified: Mon, 26 Jan 2026 00:00:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBE00FF65AE\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRoqGRlMH6Vj1XhgnpSa%2Fq1U%2Be3K3clls0Yz4jCQx%2FEuZJRB3e970qWxGmfJ%2FfVjgFktzrNBO5XAERtY7e6BfFA9Kx%2BANTItpZLeXZieD%2B9s2RnCwD7rJMJZFsDh%2FLijHwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45d006f055ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 722359\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":722359,"size_decoded":723436,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 320","md5":"81a7b50ccde75486002e89aedbf05d87","sha1":"cc0be4e506ded96d715f2bb51a49c087e3a99eb4","sha256":"dfe937823435f56130e1f4a3ed113b1d389fca69d4ff46d187d24f47c32d23eb","sha512":"71dbbbe83b8eef1390ff770be93099e2cf100179f2c74ead779aee6ca6c18602cfcdc1ad569a9c1a91eecf221387c66aab47f6aaafb33b081a1d25eee0d84144","ssdeep":"12288:+vSb3yI5f4etXwfbAFChaIQxTnr5+eQhbphLSAer1eAM4qCGJh0NOy9gvrZGhbOz:Qc3yI5fpcIChWxZQhLSAer1vqwNOy9g3","tlshash":"d0e423c1b71345a9fce70ef21545c296e89c7cb408f45bb127aae797d30e4afa0b6016","first_seen":"2026-07-03T14:18:17.194433Z","last_seen":"2026-07-22T18:04:42.328118Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.756Z","timestamp":1784743418756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/assets/css/font-awesome.min.css\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nlast-modified: Fri, 19 May 2023 03:57:34 GMT\r\netag: \"6466f3ae-12d68\"\r\nx-cache: HIT\r\nx-cache-hits: 1\r\naccept-ranges: bytes\r\nage: 0\r\nexpires: Wed, 22 Jul 2026 22:03:38 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cff3e194e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":77576,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-07-23T12:45:39.028201Z","times_seen":521115,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/jquery.cycle2.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.202Z","timestamp":1784743418202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/jquery.cycle2.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-5710\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbb94b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22288,"size_decoded":7291,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22288), with no line terminators","md5":"3981c014980610a347911b3eb292b722","sha1":"a19a589bbf0d0a607557cc93768fa68ec4d9b87e","sha256":"6b41e47a54aefc08aaa3678ed56f5689ddf69b8e8a48e9af8acc200ed0559fec","sha512":"a1e7501a56f8eb568e1c954104a2e0c382d2cbf9ffe386d1ff47374460156e1813374c69250ea17d5fd9f2c8d9d8734504c8782ca09af0b503d69efda13479e2","ssdeep":"384:dKoMqqIIaGwjZufVdJHqktq+3XlTXdE4VzExmRCqfL:PqXysVdJKkNTVCmP","tlshash":"3fa2b728b249396295f328f8733fd00b17f12d776950d6a170e2c7c96e74946b226bf8","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.184667Z","times_seen":2681,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/js/custom/floating_icons.min.js?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.211Z","timestamp":1784743418211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /js/custom/floating_icons.min.js?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Jun 2026 08:13:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2a6e47-953\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbc97d4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2387,"size_decoded":1596,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2386)","md5":"2a98ce3cc0446331f3be2fa285d3de43","sha1":"c7093d7879779e4ea90d166adfb697771dc40f20","sha256":"e62de32d75978daf1f860fd48099199c6e7851c59c6fef00fbef538c68a795e3","sha512":"7026fcda1088bb411cacd32ff0fd00f536533c649f5d9682215a78cca817561744801b1a6613b0ac9205033378d81f67a4734daf84e1cd2b6c7026f4002c71f7","ssdeep":"","tlshash":"b94174a17596a33443d5015be5bb472070201909798689c0f6acba7b173be495c22eef","first_seen":"2026-06-11T19:18:27.202513Z","last_seen":"2026-07-23T08:12:22.196317Z","times_seen":316,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/banner-2.jpeg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.829Z","timestamp":1784743418829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/banner-2.jpeg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"88a893d0ad4f015ca2379ef49b22546a\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:04 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0AF4CAF6D\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHhHYzO6Bb599Nw2Xft4SqX5vv3FOQVcfOCFdVe%2FbN9F97JxEJ%2F64zGSswl3tRFWfmklttoU4owKFO5FRsptb4DB7%2BTBr9sjahgmw8%2F1GLD2U8zyztEKHMxycpv%2Fe5P4O6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffaed15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77996,"size_decoded":79069,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 640x366, components 3","md5":"88a893d0ad4f015ca2379ef49b22546a","sha1":"7d06ff5997e10c95b19fcf3969237e64092cae03","sha256":"e6127fb88abb647ba3185ccff818b6a4a10e140759e7191c152f75c91c5fb3b4","sha512":"e8db2d102d44ebd1b0f6a9464b82e93af7196b752adeaf8cbea17cf7d7966b7fe98b5b75fcf8d08ab1e8eabd1dcc2f533aa9a432b76f6235ff9b8c903330861a","ssdeep":"1536:3QJ7Kar4yp+Ow0+3xN/YGWBCXpxGETmy+DKe4qrJj462nbwK:AVPtDT+3xQB4pxIvkWF2T","tlshash":"e97302e71a5bb2cfd41c897d3df65163862130aa78e2b4c793490769c8380e7d0ba677","first_seen":"2025-10-30T11:45:25.749077Z","last_seen":"2026-07-22T18:04:42.135507Z","times_seen":8,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/GJ5WGrT/BULLSEYE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.299Z","timestamp":1784743419299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /GJ5WGrT/BULLSEYE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 503249\r\nlast-modified: Mon, 07 Mar 2022 12:15:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":503249,"size_decoded":503615,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"4dee708e9eeac610d7f5f3094dc6e71c","sha1":"e8b10d51d82bb5288dfcb60bc1e02644baacb874","sha256":"37e278f6fca5138ece470ee48d8f6e6336d0718d1a57507c8fa6eb705c2f2c1b","sha512":"75d99f078226670d6189aef4a19ca2d7429aa3772a31c8658dff9760bae3b59246f00d3c6f5c69d8044df0262e6c07cf8a5139f6c9f1ab8c8ac2f9bd6140ad31","ssdeep":"12288:Kme91HlNCphHAArOJYE4DQc+obTgqkOdQaYXtTh395SeiNS:Fe9vNCph9rU4EoTkOYxHLiNS","tlshash":"99b4230ddf6e4d19fd1dee7a2a06cd5e54af4cd1c8bac879a08c6d54202029ce7ccb96","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.25786Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":807,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/WG8xfxw/KENTUCKY.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.319Z","timestamp":1784743419319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /WG8xfxw/KENTUCKY.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 505478\r\nlast-modified: Mon, 07 Mar 2022 12:27:00 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.445Z","timestamp":1784743419445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.6.2/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.6.2\r\nx-jsd-version-type: version\r\netag: W/\"f463-4yQGPI9GxrKUJ98VQvECatIw9gQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834917\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62563,"size_decoded":16721,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62284)","md5":"2a753de0369d13becc9649fc48f55535","sha1":"e324063c8f46c6b29427df1542f1026ad230f604","sha256":"423217abf8775cea2dc30fa1fe3e1c5e24dc359a80f1c37ad29a86094bfe81d1","sha512":"eebbac93c9063c5ca7656bb6e8e29b4de23e40fa18721b71b263de06a9072045c9c5eba7e3227821261eec2eaccfdc1dc5e1351a4dd5c6c21680265373ebd7de","ssdeep":"768:dGDfR+ohTVSwU7NUgu7MTCm0BKSHIBOiAAcFcQZI20xIl6jnV3jRvNXBc:dSfRFWw1JHumVZYxdVnXBc","tlshash":"8053740672a4f472059fe466803b090bb7362c9de446b16cbadd98dd1f7cd483267b3a","first_seen":"2023-03-08T06:42:25Z","last_seen":"2026-07-22T21:04:09.714336Z","times_seen":6375,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.2/src/index.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.453Z","timestamp":1784743419453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.2/src/index.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a1f45d03997f5a0f-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1238685\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 22 Jul 2027 18:03:39 GMT\r\nlast-modified: Sat, 27 Jun 2026 11:07:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:n+FCXfkJ7cEmTqq7J0ayH83AXxJOHkVRUDGhnnqXuu8=:\r\nfly-request-id: 01KTBHAH0M95NKTJWTBB7BHZ67-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356,"size_decoded":1143,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"54cdb604e88d3093ff6309ffdff93a6a","sha1":"fb023b1b8b3dd5c3a5822d56c63119d19faa0c14","sha256":"9fe1425df909edc1264eaabb2746b21fcdc05f124e1e45515031a19e7a97baef","sha512":"8c6561814787a33709425d92d78fcb4300755e8b9b7bf0b061e3a6724586ab67fe94739ad1e71864e857aba873985f41d49784eb4f739c4018a3c84dca9ba78c","ssdeep":"","tlshash":"60e0202a50f18652967640cbf4175155f451013e540cd940d1c8cc7fad68c9530fa754","first_seen":"2025-04-08T04:25:33.720822Z","last_seen":"2026-07-23T08:12:22.138207Z","times_seen":1400,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/font-awesome.min.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.104Z","timestamp":1784743418104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/font-awesome.min.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-7918\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb2ee84e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7478,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-23T12:45:39.044529Z","times_seen":301578,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/feedback2.png","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.258Z","timestamp":1784743418258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/feedback2.png HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1180\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-49c\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc1a9a4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1180,"size_decoded":1581,"mime_type":"image/png","magic":"PNG image data, 206 x 32, 8-bit colormap, non-interlaced","md5":"76fa4b2588a14d5e8c62f70f7263d62d","sha1":"8f2510f7d96cf7a1756ff8dbcafc248bcafb31e1","sha256":"639775068932c1b628a731e51f57a420b6006929bf08058d1dd628b2b0aa1e51","sha512":"69251210bbb555159087994e5c28a3552118279bd93ad8aacd6b95a99b1331c9053653f2abae5ed064e29c23ba26b3ec283577af83d955d04110b28556aa080a","ssdeep":"","tlshash":"8e21cad9ff40d833dee1874c05b05201d6c284539a2f266524dfc8a856e72d9fd7db91","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.110267Z","times_seen":2513,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-totomacau.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.309Z","timestamp":1784743418309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-totomacau.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52505\r\nlast-modified: Tue, 26 Mar 2024 08:45:04 GMT\r\netag: \"66028b10-cd19\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c1c4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52505,"size_decoded":52909,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"1aa941152037ed686d532ae5691731d7","sha1":"8222036a29fa540a55dbfc2cfff401b12d5cfcf4","sha256":"44afa7bac070be11a25113dd4ced630691439d7801bb9fbaf0b2251776d1e558","sha512":"c310d4567377aeac86f5427ce17f1a625b23552869737634a66946362619f616cb69b0b74ecc96080bae282684f553227fde12019a927cc9d1d5098c0ab62c95","ssdeep":"1536:qMgV6MUNNyDP4yWj4GYkUnk5hNQRh3txlI:qY/6DgZXUCNQLtY","tlshash":"5333024dde52a720c3e946ff7538938c06464b64066b3d90fe080982ee32fa65f63769","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.729487Z","times_seen":2064,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/mayapada.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.362Z","timestamp":1784743418362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/mayapada.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 104530\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-19852\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfccd164e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104530,"size_decoded":104935,"mime_type":"image/png","magic":"PNG image data, 2034 x 243, 8-bit/color RGBA, non-interlaced","md5":"f2b5380312aeccf8c2c4206803a34c35","sha1":"9c0ee8168cf210ef7dcc9c3bd53c4c53c95086bf","sha256":"cebd6f6ab8eca3dc7775e635c5ab736748929e85cc18b27d74d5e1891bda2aed","sha512":"6cc345b8ed719517257edf9062c0304b9e62cb76873502cf76dbe975ae6e1ac5327c82a5b3b2477ed0020c3cdc62beaaabf709b11ec67af1183a82ab2833cf69","ssdeep":"3072:D5gULioBTCAu8IeCY/2GujqqksoZdXTfD9IJG:DrioBeAl5s8dXTfZqG","tlshash":"37a312c1070f98be1d3fa64faac7649420bc713905ad7cf8f93693cdc31a5247a1a25a","first_seen":"2025-03-10T01:18:36.774437Z","last_seen":"2026-07-22T22:49:40.899823Z","times_seen":138,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/ZSNqf3x/TOTO-MACAU.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.290Z","timestamp":1784743419290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /ZSNqf3x/TOTO-MACAU.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 500584\r\nlast-modified: Mon, 07 Mar 2022 11:41:23 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":500584,"size_decoded":500950,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"8d68684b5d24db9a48c299986680835d","sha1":"3c50945eb7ad2fff0189394d060b70537f10d604","sha256":"7390847c7ea684a6ba8397dcd8a5734c6303320160c830495396be5094a170c8","sha512":"153c6f810a6ed39eb7484cb8dcd7b7e5838f55e223b4e1d9ff4564adcd4274f8ba6f8e93c16e72561f04b93ea264b2b80f4e3aebcad7131f0bd3367d32c7e8ff","ssdeep":"12288:ztWMPFXLPvhtPnuXyPrXKw1Vt6sC6CQjfqL/7RnaiSHJR7rw:zouFDnNrXB1K/4iAJR7rw","tlshash":"3cb423fcd43ecec9f813fe70294f2ca44abf4ca5994058bbd819b942726417ca5e8947","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.118831Z","times_seen":11,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Z8XymfN/JEPANG.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.298Z","timestamp":1784743419298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /Z8XymfN/JEPANG.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 484959\r\nlast-modified: Mon, 07 Mar 2022 11:44:00 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":484959,"size_decoded":485325,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"1cd96963a0b3f1d025a99ad8e85d71de","sha1":"4ac38c922c1b0ce74fbd60e5c5535aa7ea153f57","sha256":"ef8236dccc84e4d346e61cd8cd783a2813b10a70b383e169ba7540bbf9b18a93","sha512":"f4e0a031cd0d1bcdf5f4fa1f5a3e0972e669ff827ec34d342e389fb898f01cbd12df92ccb83bc18d1d665467eb56fcd81e5f78e5c9e8bc2efbb4ab21a9da3563","ssdeep":"12288:slCW+2fFYDVy79frGGamiX065NkaOUrZZdOwF8GsDq:slCW+MYBo6GgV5/OUrZce","tlshash":"e8a4123dc968cf46f04dbcb06aa195a9108d59e5c87484f3e128eab0b1435bdf67f392","first_seen":"2025-10-30T11:45:25.763177Z","last_seen":"2026-07-22T18:04:42.247603Z","times_seen":7,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/jenius.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.327Z","timestamp":1784743418327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/jenius.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2310\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-906\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c754e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2310,"size_decoded":2711,"mime_type":"image/png","magic":"PNG image data, 72 x 24, 8-bit/color RGBA, non-interlaced","md5":"e7248b9be9e6467dd95119449994d494","sha1":"558aea3f3b42a18f90e0b0f3239f783ce152ca51","sha256":"89b4591d94ce2999fe469c19693a27dc69211a41e55239dcc63400a65618c128","sha512":"7e6a4f8f677b836e0511e4fe35ef734b5b2e76f75626d0df540764d93e9980e10def9ec5ad1316d09a268665a835d3c0084792c722d63e40f6af34762d2a7977","ssdeep":"","tlshash":"7d414ba321bfcd5d532d422b0c7bf244308b86c2266086b3a097d2833d34a8dd89425a","first_seen":"2024-06-16T19:29:36Z","last_seen":"2026-07-22T18:04:42.2362Z","times_seen":537,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/owl-carousel/css/owl.theme.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.121Z","timestamp":1784743418121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.theme.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-491\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f614e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":842,"mime_type":"text/css","magic":"ASCII text","md5":"3ea6896ea9e3b4da06cc4d865bc75c97","sha1":"706948cc46b52e5f68c531f79f647884a3f30a3d","sha256":"c91c5cc4707b835fd0f3393d3200803a7a1a5cb95a299cb10c9dec7eef0f7d84","sha512":"0869113272b6b1effc18ce4edde1c197ba0d378dbcc7776205a5597ff188cc017597fdb5aa49555d94f4320dc8c90bf7e7c599d2d67cf6ebe30954cae4ea1e86","ssdeep":"","tlshash":"ae2125e4d668425d307ac2847a0ccecb628d72b7a21815eae4ca7934e34ad41392f349","first_seen":"2023-05-24T14:32:03Z","last_seen":"2026-07-23T08:12:22.109598Z","times_seen":1259,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/mandiri.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.330Z","timestamp":1784743418330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/mandiri.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1127\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-467\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c7c4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":1528,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit colormap, non-interlaced","md5":"d6370af97aa7f285493a9aecb3e33a42","sha1":"9a52cc25ace828f731b8790593a2aef19a7b2d23","sha256":"5e829a18cd9f27940b0bcfd8cbdc4395f368de18d89fd96bf09fcd5cf267a58a","sha512":"6414efee3383e0689225b4f5a2225d2bf5f9c50e04d78ea286cea5710d549f8f7cc363eb533d0b61cfe5e4d48c58b8e21660d7ce0df49fa552a3f3233460269a","ssdeep":"","tlshash":"54219687b6e67cf895399912396a304a8f990511ac34d305078e670347f58d2bca73b6","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.92978Z","times_seen":2095,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/fonts/Muli.ttf","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.828Z","timestamp":1784743418828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/fonts/Muli.ttf HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 49008\r\nlast-modified: Fri, 19 May 2023 03:57:34 GMT\r\netag: \"6466f3ae-bf70\"\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\nexpires: Wed, 22 Jul 2026 22:03:38 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cffafec4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49008,"size_decoded":49424,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 32 names, Macintosh, Digitized data Copyright (c) 2011-2014, vernon adams.MuliRegularNeWT : Muli : 25-2-2014MuliVersi","md5":"df7330254513d2fa2f4c1e9ee98cc6c6","sha1":"aa2edf77d86fff82790b846917772837828e4902","sha256":"45acbaae00fb0cfa8413b582cd4c0dad9653c78a051a7215205079ccc7c7e233","sha512":"7b105ea2d7f505435519444826958f064ab7d96583f8fa9a963b9285054452599b117957e4015e36125d749fc51863ac55341d04e0317d3d36f2d93e4c6607f9","ssdeep":"768:Lft4a1riuqGu3suyskhzsKxcLgmPPn9tPMZWQKmEcBWzoGHJ/VpwWfgzCjobOSjD:9gSJyvXn9tPMWcsbzft65qe","tlshash":"d3234b02a384060ed5154f7c8aa4a7da67dafe132951cb0b73ccef6cc9521e44a57bce","first_seen":"2023-04-05T18:16:08Z","last_seen":"2026-07-23T08:12:22.120645Z","times_seen":2699,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/CWhbQWN/CAMBODIA.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.294Z","timestamp":1784743419294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /CWhbQWN/CAMBODIA.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 489195\r\nlast-modified: Mon, 07 Mar 2022 11:42:28 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489195,"size_decoded":489561,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"cdadf4be6f3bc2015016c1cc22f7a9f7","sha1":"c0b9196b5bb4508ab83e7bd5fa764549c7133c06","sha256":"988698114726bb7a1a5c39b2a3e4ce20d85fd3adb083ec1bf9d26b57c505703c","sha512":"e772a5629fbc4a2f82334a743251e05dab3bd99b5d029366ef28032ace26c74c173b10c1ff0f214df2920e2180a02658a4e8cec669f8ad61b90991865de83ba1","ssdeep":"12288:UAovVa2jpBi3j1BneTgqKKhQ0yvJocWH6C25EC4nU0Sn:iXaheUvCWn5YnFSn","tlshash":"aaa4236eca38588d987e1d7a259bae4e087a0df4cc30e277c1c9bc29bd091dc605dd5e","first_seen":"2023-11-16T14:55:59Z","last_seen":"2026-07-22T18:04:42.14603Z","times_seen":10,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/3Nzmjgb/MASSACHU-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.324Z","timestamp":1784743419324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /3Nzmjgb/MASSACHU-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 484839\r\nlast-modified: Mon, 07 Mar 2022 12:29:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":484839,"size_decoded":485205,"mime_type":"image/gif","magic":"GIF image data, version 89a, 173 x 173","md5":"f533648f81ca5745dd34879b31c6f115","sha1":"5804bcc4f087af114c51afb16cb6e7589974a2e3","sha256":"d8e89714ca7165bf0e0d9265dd2facb963a3bdd3863e345fce57334d81240113","sha512":"f1e03433a1726defd6372c2e5f05d56506fdc2275cd6de13601e6d714bfeb7e94456f8ea406d8995726664bd5a4bac168bc19436e376577940ccfa4a56f55bf7","ssdeep":"12288:rRQTA+m+/4w7x/6rDx3EmA9UAq/QdnownVo1hj0yx:dh+btCram0UAPdo0a1tl","tlshash":"26a423acdc1a641be59c3eb53983dcdab43c84e14062d5f3d076be61392b05cdaa47d2","first_seen":"2025-10-30T11:45:25.81314Z","last_seen":"2026-07-22T18:04:42.164588Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":4137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/pr74v6v/OREGON6.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.367Z","timestamp":1784743419367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /pr74v6v/OREGON6.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495215\r\nlast-modified: Mon, 07 Mar 2022 12:39:43 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/NSdzZhy/OREGON12.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.369Z","timestamp":1784743419369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /NSdzZhy/OREGON12.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 490860\r\nlast-modified: Mon, 07 Mar 2022 12:40:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.441Z","timestamp":1784743419441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@4.6.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.6.2\r\nx-jsd-version-type: version\r\netag: W/\"279d8-G+N7YjBsjAxndbtMk8XkxOE9l3U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834917\r\nx-served-by: cache-fra-etou8220182-FRA, cache-bma-essb1270072-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 25226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162264,"size_decoded":26007,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65326)","md5":"a4b3f509e79c54a512b890d73235ef04","sha1":"1be37b62306c8c0c6775bb4c93c5e4c4e13d9775","sha256":"f886516f3d41e9e7bd994c7f7a39a89cafae9483f90396cb0ddeafe8d1ea5e72","sha512":"aedfd2ad0e143486867c3c845d9b4d7325af41e3aad102f280796e1507128da181d382315a16a5ef5b4abb33fa2bc7985d807abc9578a47917726146190d7fd3","ssdeep":"1536:SS7CI4NT5+rMqFVD2DEBi8yNcuSElA3/uJpq3SYiLENM6HN26B:17sAGLq3SYiLENM6HN26B","tlshash":"9cf352a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-07T07:49:16Z","last_seen":"2026-07-23T13:31:14.507199Z","times_seen":12080,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":3,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick-theme.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.152Z","timestamp":1784743418152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick-theme.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 655\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 19:26:10 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0c7Hm8iNfI5C%2Bl69t2i%2FZ9n876j1FCgtuavvwHs%2BoxBrebxZWXVmjXY5s9HUSwg5JTyRrgkoDpfsI9q46n9Rv%2FVfHZqYHkuya3oqpcOjNT43qZwsPHJm4UbKIjsAVpvVaSecfGi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45cfb8b46a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2390,"size_decoded":1646,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2332)","md5":"8a027447d99592734da0715287305e13","sha1":"7c2e6e74fb60177782cf7ae30f5fec71b7790874","sha256":"e21aa5b0d3fd28cebed9e03c5544f4924e11b0c453792ed018720cf8c679b0b6","sha512":"d7b120085111a6064a726d23d1f12ad58089bb2016773f4a52dbf512356e68ecfca439e1ff49d9c6653a0415f069ac6aa22f4f4179d15aa95c0c1d36ee182ff4","ssdeep":"","tlshash":"e44143685161b2ca4067c620bb83828530c37953b67319f8f52f532cc0cd0992fe8b5a","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-07-23T08:10:14.690966Z","times_seen":15973,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/linkaja.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.329Z","timestamp":1784743418329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/linkaja.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2146\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-862\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c794e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2146,"size_decoded":2547,"mime_type":"image/png","magic":"PNG image data, 89 x 25, 8-bit/color RGBA, non-interlaced","md5":"2d5925ab422101ea8f19560ed06cc097","sha1":"f749f359d92005a41ffce77b9a2d8c5888670f6c","sha256":"7dfc635cc62e740491850e4bf48ecf3cf0cf21b248f9af8536abac4157156888","sha512":"8f9205a7ba24d863d4f65eae2bfd8159e19a06604c7af5df15dd5548a553aa9a7410bee56ca52f3ad927a6eae846d3ad12864dbe01364004b0a5ced52e518608","ssdeep":"","tlshash":"1c411a9fe804764264a9964220de6423ec4380816294f075acdfd82f57bc4fd1d0b6cf","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.738353Z","times_seen":2038,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.443Z","timestamp":1784743419443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 2975285\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 375577\r\nx-timer: S1784743419.485278,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-07-23T12:45:23.408904Z","times_seen":181486,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":9,"receive":4,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/owl-carousel/css/owl.carousel.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.120Z","timestamp":1784743418120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.carousel.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-4b7\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f534e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1207,"size_decoded":841,"mime_type":"text/css","magic":"ASCII text","md5":"78047d6c2d6e61624be8ab53f040f58d","sha1":"b6cc8fb9d948477f947bd582d7eabcf5c69325ae","sha256":"f082a14b9512e8b85752e92e860b06c54b07476aa9f84ab4d22a6238809b5464","sha512":"ffd64443e18ebf40496ee41d44a233181b9cca1a85ab159fdddbbd16bc32ef883e00d59ab66c56fbe8ed905ca76c8506f3950ad1116f216b00f5c048d13eeacf","ssdeep":"","tlshash":"51216ef40131318d602bc31f56ceaa195a3dd1129d22160e521faa094bcfd1e613f78f","first_seen":"2023-05-24T14:32:03Z","last_seen":"2026-07-23T08:12:22.152058Z","times_seen":1341,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/owl-carousel/css/owl.transitions.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.123Z","timestamp":1784743418123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/owl-carousel/css/owl.transitions.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 590\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-ef9\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb3f714e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3833,"size_decoded":1038,"mime_type":"text/css","magic":"ASCII text","md5":"f30d5b54fdbdd797fd2b3984d86212f4","sha1":"22d9d642188022c65959dc9edf6c430613a4c15e","sha256":"e3f2b6c8ada6af5eaeba55383228a50eeef1f88613e3d436ef1d1c925e9ecb83","sha512":"efd728d75a314a92e128ac9e82db38c333469211b6185f39ab53bc5dc0c29e3ef40cc9d755f66060ef680db0cf36628004d55b91784df7f10034373e2b7cd35f","ssdeep":"","tlshash":"4d81386f81921348949b0781bbd8f6980b4c899264339cff71c97d9bcb046de53f9a1b","first_seen":"2023-04-27T22:13:16Z","last_seen":"2026-07-23T08:12:22.187158Z","times_seen":1382,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"landingsplash.xyz/banner/image/promotion/IDNTOTOSYD.jpg","fqdn":"landingsplash.xyz","domain":"landingsplash.xyz","tld":"xyz"},"ip":{"addr":"104.18.11.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.299Z","timestamp":1784743418299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"landingsplash.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 11:39:54 GMT","end":"Sun, 18 Oct 2026 11:39:53 GMT"},"fingerprint":{"sha1":"79:BC:8C:EE:D5:F0:02:89:CC:61:D9:78:BC:FB:0E:FA:67:E9:1A:19","sha256":"B7:27:96:F4:9D:7C:33:8C:D3:69:FB:11:06:47:32:9F:8A:3D:D4:90:EB:5E:85:0A:35:B2:B2:64:81:6A:59:FF"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTOSYD.jpg HTTP/1.1\r\nHost: landingsplash.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Wed, 22 Jul 2026 18:03:41 GMT\r\ncontent-type: text/html\r\nlocation: https://object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTOSYD.jpg\r\nserver: cloudflare\r\nexpires: Wed, 22 Jul 2026 22:03:41 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1f45d11b872723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":3485,"timings":{"blocked":-1,"dns":83,"connect":3,"send":0,"wait":69,"receive":0,"ssl":3330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/gopay.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.325Z","timestamp":1784743418325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/gopay.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4046\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-fce\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c6b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4046,"size_decoded":4447,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"50248070ce64c8360a5576e782f23e68","sha1":"a14710eec9377c1200f0af4f13c2518e0d15fcc8","sha256":"c1e6c3f3fa6029282b8d718f2088fd4dfd5ea272fcb63bc37f95e66df9918df2","sha512":"df620d681efa293af6ada8fe51d4910ee1cb3fed2e7932cf618ef113ce33bd4debec0e4c40cebb7a28481ecc356add8d3acb03103d0575f7074a50c4dae79d8a","ssdeep":"","tlshash":"04814cafbfd17f40569260d208e484931f360dd1ac91e6a2ac95c8de34a19fe1985fc2","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.945125Z","times_seen":2093,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/vVJ8g9z/MISSOURI-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.330Z","timestamp":1784743419330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /vVJ8g9z/MISSOURI-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 497182\r\nlast-modified: Mon, 07 Mar 2022 12:32:23 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/QvC7MWy/RHODE-ISLAND.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.374Z","timestamp":1784743419374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /QvC7MWy/RHODE-ISLAND.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 483910\r\nlast-modified: Mon, 07 Mar 2022 12:44:05 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-sicbo[dice].jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.314Z","timestamp":1784743418314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-sicbo[dice].jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6397\r\nlast-modified: Tue, 26 Mar 2024 08:45:04 GMT\r\netag: \"66028b10-18fd\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c2f4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6397,"size_decoded":6800,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 210x205, components 3","md5":"0ba7932557a2ef57f4a404c2e8cc89ca","sha1":"bdaee9aa983c86abc3b6e12d904263d9d020b8d1","sha256":"944e25293de1902e94503301ab274b4348c7d48828414eee613fdbfc614dd74c","sha512":"008d4ea19a9814894495373b9537293bc5ccb2e213657c7ee2122d09121b84456b64be8ee52216381a891bf561f023e4bb90e208561667eba3ae53d51d45d613","ssdeep":"192:U/jMXLdi8mVPcW4Aiycewb1WBZNXb592cQ:Ug7Q71Z4Am5ZWld0","tlshash":"b3d19e678ee8382beaa6463c19d45cf837a18ec31e64a590f6cd3d847877120c84729d","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.91803Z","times_seen":2043,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/panin.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.335Z","timestamp":1784743418335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/panin.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 7544\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-1d78\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc9c924e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":7946,"mime_type":"image/png","magic":"PNG image data, 450 x 100, 8-bit/color RGBA, non-interlaced","md5":"37fa040c2929dc9063943c5ea2ca3622","sha1":"56fb45e917da5788ca7f767daad839f96d8cabef","sha256":"cb5d8a5e20e3aee1333d24ce82fb36025b895146dd7f1a602cd921d828e1fbcb","sha512":"4f582660270837c6c6b08b9e36ddf745bdfcc78c2e3b2517e3292a825c7699ddf9c5f9d7c120e2fcf204ccbd667e4c7ce22fe53a0c511c05506775cf31885898","ssdeep":"96:TX2/2D1siKZKj/d/NN0qDzh8aV6x+JalPWDNNgqVjIycerHuD3cXX566E/6Zo:TJ5xKZU/juSdV6iOuDtL4cXXc6EiZo","tlshash":"12f1af5cb99171e140624af206fc8162fd3b1cb642d9f1ad70a6fa9da0c153512be2cf","first_seen":"2023-06-01T16:10:36Z","last_seen":"2026-07-22T22:49:40.721547Z","times_seen":872,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bankntt.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.346Z","timestamp":1784743418346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bankntt.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 126132\r\nlast-modified: Thu, 26 Dec 2024 08:30:06 GMT\r\netag: \"676d140e-1ecb4\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcacbd4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126132,"size_decoded":126537,"mime_type":"image/png","magic":"PNG image data, 1200 x 711, 8-bit/color RGBA, non-interlaced","md5":"0be63622a223bdf5cde56cad25019f23","sha1":"8f60c81b8ad495dc62b12eb94b1dc70264809da2","sha256":"0fc74389791c33948b27fa6cfb21b93a897aa06c2a72ce87ae839cc253045e86","sha512":"865c68e5a46bea15696e2f105cac9735744b79293c120542a1837f080da5424250385b8973f4970ad8e9eadbfa77f75771eb8cd86a63ced89e7029ab02d3b632","ssdeep":"3072:9UOsdatDoCESarH0PtKdJPbGt+aj8g0kO:9UOsPCESSHuKpbw3wg0kO","tlshash":"0ec312f0544bc97a4c2fece82495dba21d168e4ca0e85b34f7f0a8ecd755bc47265e12","first_seen":"2025-03-10T01:18:36.725349Z","last_seen":"2026-07-22T22:49:40.947484Z","times_seen":121,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/55vJ2WP/CALIFORNIA-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.302Z","timestamp":1784743419302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /55vJ2WP/CALIFORNIA-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 502905\r\nlast-modified: Mon, 07 Mar 2022 12:16:27 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/btn.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.349Z","timestamp":1784743418349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/btn.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 66617\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-10439\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcaccf4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66617,"size_decoded":67021,"mime_type":"image/png","magic":"PNG image data, 2560 x 1436, 8-bit/color RGBA, non-interlaced","md5":"c735fa47c7646cb1960cd28c3a9a6150","sha1":"1d787dd6e2a93a10a119d65f749f0e2a03f22315","sha256":"685b9df208c28e4c6cab2aeac29574171f3704b4a3727e6d4ac2a1e4a6495d92","sha512":"bbfe49433351157c1a2e48020d7573defda3102d52253077ff1ab7765607e09fb8504fd0208ced4ac1a61327646d56d10f7b21c593bd1d5cc88a3326d52d1694","ssdeep":"1536:oo81SHChYpPkFwMIZI7CY3ogAsiEHZyuc0gkzEqZExRt:ooBXPkwZVuoglxcF2exRt","tlshash":"a953bf56d0178abac1a94eb2c0ff5f0bb772837b8066574693b2491d3dd57bfac01680","first_seen":"2025-03-10T01:18:36.772614Z","last_seen":"2026-07-22T18:04:42.140931Z","times_seen":225,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/json/fetch/index/data","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:41.012Z","timestamp":1784743421012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /json/fetch/index/data HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=6ctegqBKvFwwnQHb055QKqAZPLxNZO6byztBGI7bIgM-1784743419.6314957-1.0.1.1-z.pPO_0H254rfVHxv8HGFzo4fd1FDN__TvHw.XEqWWa1lJjdCBEaR8tCISkO5pjnRk8vVFmNkpIy9hzenR_8jsucbkplwzlfd9i4VOe3yZUgAur6Ac9hz4h1rdHHZP1y; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ; laravel_session=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%3D; cf_clearance=oWVdt04928XlW1p3qDOfywJX18uW94lRzABJVSkZejs-1784743419-1.2.1.1-VTUxIRnm4nUS72z_RbOjSgHNYkUDfuckBTY.ILzXJH8cFJ7akTHSffNyf0X7xqP9dsMzWd5wmbLw9bRC7E.lTKgtN3.aQorPERKZbLPRq784p0s.tkhaKnTIl6.QjTiSeHaWf7nElvWvCMNtxTRcoH65UFnxyxRWNPjm7SmI1px4w6RGY2ZxWDTGseLtGe.UVCjIwwBwv_MI5f1nSNenUulKU7v05tvEdiuQA5WZer9icFZTmmH.v.TALklR5SXTIL_f1NMWWyVFYxqoHTyKOM187TLHMO4KtWWJ5OISIQzWoaIhJVP2JoXwD6xgMWLL_JtM7SzHBLKKSz4UQ5ONNSSN1X2KheZ8XilzP9Md_us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:41 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=900\r\nx-cacheable: 1\r\ncontent-encoding: gzip\r\nage: 0\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a1f45d0d4b784e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24568,"size_decoded":2521,"mime_type":"application/json","magic":"JSON text data","md5":"c0ba00b8af5619e312af80af5d834391","sha1":"5633548431ad372fae502664f98104f2572708ba","sha256":"77dc565381db31cfcaaad8b7119e57323ea087afcf9ae5d0ac87844a30c20a1a","sha512":"6dc7ff959f377e81977600eb65d57c5903b3a4fdc10ca6bc6239801d69e672fd94dce50aebaf601f33b1d0e5dae6cff9847e7f61c898fcb651c9ebe2e8b17ebb","ssdeep":"384:nKa8p4V/jg7ExxTK7bAzBX2PuMFpTXc4LSHAv1uezBg3Ipy4GHRilrNxfN8DJhFy:nKa8p4V/jg7ExxTK7bAzBX2PuMFpTXci","tlshash":"48b2bdba6e946576a50b0fda326a27cf7eb0a821dd4f842166adcb0d4734c107fbc41d","first_seen":"2026-07-22T18:04:38.924248Z","last_seen":"2026-07-22T18:04:38.924248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/GOLDEN-LION.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.842Z","timestamp":1784743418842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/GOLDEN-LION.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"0ca7f4fd6e436d304f4cfefeb3769042\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:17 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDB7599E1\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQECpQG7oQmdbG22GOND7nKv5xOQcMnyp1pZnRGPFWko2Xk7BRvrUJWKH5W7wwW304g32botqgT%2FvMmugS%2FrB5H0RDkcD7fwVbRLbWHMOo6FaIyIoxWcoOzWeqKqrrDiqr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffbedc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42129\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42129,"size_decoded":43197,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"0ca7f4fd6e436d304f4cfefeb3769042","sha1":"0afa54914d09db55886b98c18a31708661adc39b","sha256":"5cf78bb8acf91bdbe36f8e14b4a084a9efe3d54d51f4097ac94cfe9ade0ea640","sha512":"46efd2b1d3b342df6ae1a3145fb60afe95e2f8cf170496175b3d8528146846fbaa8641e0c29d1cad0694c88e07da63c29645f6aee4b16e796a2f74186cbb974d","ssdeep":"768:MEu8oFKr8O7N6z6kWICPUX1Qvsq/I+sWeZ0fP1hLN2ag65XYTmSSi:Nu8oF9AkbWIgyusq/IBN6Vj5ITOi","tlshash":"c713f14e078bbe8392606ecbdc76ff05887e8c80a7b7d11b399c815d54169f4876203a","first_seen":"2025-03-01T20:39:52.076906Z","last_seen":"2026-07-22T18:04:42.250764Z","times_seen":52,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NG7PRSSV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.211Z","timestamp":1784743419211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtm.js?id=GTM-NG7PRSSV HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nexpires: Wed, 22 Jul 2026 18:03:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 115656\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322669,"size_decoded":116260,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4837)","md5":"abbe37380349f062efd214e1ffb5d8f9","sha1":"c7820d50b4d5a734e5abdb0c309791a7f308c66d","sha256":"9de9f796b274cfe14679d85f82343d0ad9fe8e0b7df8c40ebef4b6d757421a6d","sha512":"b7dcc065abd61cdd31f0a69dc33c9a35f7deb30bb06a59813eff9f9ce17b47f65c46b4bc6187f524067d2eef5a77e183e4e8e9703171e4b28ffd5cb7b7f604dc","ssdeep":"3072:t2UM7pyNzfV01tL1016I7YtdtrNhRycUF2DXAhouVTWQUceBz9d0C3TnpTMK059H:spyc1J/I0tflx0VT+cMz9d0C3Tnpyzbr","tlshash":"6d64f8ccb3d6746283a3a478503f014ba23a79d1f84cd898f186d9d42e746698277f7d","first_seen":"2026-07-22T18:04:38.925714Z","last_seen":"2026-07-22T18:04:42.212115Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":33,"receive":37,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/MfwLH36/CALIFORNIA-DAY.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.301Z","timestamp":1784743419301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /MfwLH36/CALIFORNIA-DAY.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 498477\r\nlast-modified: Mon, 07 Mar 2022 12:15:46 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.179Z","timestamp":1784743418179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/modernizr-2.6.2-respond-1.1.0.min.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-4812\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb98c64e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18450,"size_decoded":8005,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18450), with no line terminators","md5":"2015fe4e8911558500fb094aac79383b","sha1":"2d1e5126c8e3386153082b98e841d7a03435d975","sha256":"bf2d2ce2803063fd72be8165d5fbbc700e24dfd6bfcb351f064367a90db9ef4e","sha512":"d6e3fb657e8dd62f942f2f59000ace81b36ce43ebcc8abda4018c1d73b155b3ce2e83d33dc1ac86cfe81b0d76100137197b905c1f87e9f2f194a4e2eac3013dd","ssdeep":"384:fD9HWD99TpJGd+iesmAnxpakrwHVXHh1p7l8dVNOpZpMOUROOHEAk:fDiAebALak0HVXHRl8dVNSpPUR1HEb","tlshash":"ab821ccd7253b11a8397707a607f420ef23a5899a8184850e059c9fcbe74de8427ff6e","first_seen":"2023-03-07T13:14:18Z","last_seen":"2026-07-23T08:12:22.199218Z","times_seen":2704,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/nobubank.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.356Z","timestamp":1784743418356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/nobubank.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 142686\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-22d5e\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcbcf04e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142686,"size_decoded":143091,"mime_type":"image/png","magic":"PNG image data, 1600 x 593, 8-bit/color RGBA, non-interlaced","md5":"45e0371c9d7209bd16569f7cf37763ea","sha1":"8aacdb6b4ba962a2c0e008cde6635cd10c8c5230","sha256":"aa3e1d4a75b58f81409587f73ecc4f5138b53b07ed67abc307db35a4cd0be48d","sha512":"a1cd19793054c62bab4968392dea4140337396cf6938bb62274b406d9480032eb96e65150974f702d18d40d5cc6cfd1893abf297cfb70fb5be541502abba7d12","ssdeep":"3072:2wsLy/PT83Ym9elI71Gf7jt2FPfC7fopnYozB+sn+P:2L6T1mKIKG67ApY0fna","tlshash":"a0d3137ac1f7e2d0fc2fcc7c1d29b32564ac202e85429478727fa931e61459434e2eea","first_seen":"2025-03-10T01:18:36.685967Z","last_seen":"2026-07-22T22:49:40.681541Z","times_seen":149,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksesbayar.com/wl/idn-iframe.js?_=1784743418301","fqdn":"aksesbayar.com","domain":"aksesbayar.com","tld":"com"},"ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.799Z","timestamp":1784743418799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aksesbayar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 07:19:43 GMT","end":"Sat, 05 Sep 2026 08:19:28 GMT"},"fingerprint":{"sha1":"4B:9F:02:CC:FC:DC:68:FF:73:EF:02:59:A8:F0:7D:E4:50:B5:85:EF","sha256":"BA:22:0B:6F:24:BA:99:7A:56:44:74:3F:DF:1E:2A:B1:23:EB:35:1F:5B:B6:D1:E7:D3:15:EF:05:6B:7A:76:F8"}}},"request":{"raw":"GET /wl/idn-iframe.js?_=1784743418301 HTTP/1.1\r\nHost: aksesbayar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: undefined\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=86400\r\nlast-modified: Thu, 09 Apr 2026 12:34:29 GMT\r\netag: W/\"2628-19d723ca2b7\"\r\ncontent-encoding: gzip\r\nage: 66431\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4vPo9jKWyzvoc9Owe9nsMoM6TLF10P%2BfZLoB3CPQV58qIjtCW4ShhxNykvA41%2Fo4jJGMOAs3foI7m0G9iU3FFdTiEdk4ytGQmno0xrYzvc8IXqXdPcrXPkV4HLWQS3k\"}]}\r\ncf-ray: a1f45cff7c7c56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9768,"size_decoded":3587,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"00d4b93665fca490c742c58a58f380fe","sha1":"7b8763a54c22ad9aded68f96ff7347058f9f562b","sha256":"59da065ecb2951b938d1fa36e72e60628e19823b58485869c4cdc4f357b0fe0a","sha512":"c37b5da17ee78039f9620e9990dcf05d4e1aaa6aa59820dca403ff5a7f7fcdb0f3407a31497da971b5d89cf46479922a99b3d8d7339a5aab29fd745876d3cbc7","ssdeep":"192:cerMx8yeVwYHn+Ziz6i/1KeL0ZE19g3ptzqHaax7H:FME+Ziei/RaGd","tlshash":"8d12534b20b720366137207e2fdf6045b9b0941b3205dd687dac87486f85d3ad7967ee","first_seen":"2026-04-11T07:58:36.378772Z","last_seen":"2026-07-22T18:04:42.328964Z","times_seen":21,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/STARLIGHT-PRINCESS.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.847Z","timestamp":1784743418847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/STARLIGHT-PRINCESS.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"5d69ad19294aaef06374142414cc884a\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDDA65B169\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ns7F2rwlbP2uL5WWTnnR86hp8RWUvsBTu%2FUjjPOLXq%2FZM6mt0%2FUOvgAOInbrj9MPhtqotH1Eq3R8yz3gC%2BH26d7p1UWAhABi0QPtcBXDgoWki16FPOKnoCqXYu3PvN5Q4Z0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45942,"size_decoded":47012,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"5d69ad19294aaef06374142414cc884a","sha1":"6036179be3d872064ad94ff7a3f25237998462f7","sha256":"e7e3a8ef869c4de649b4d4b0b062752df6df079c0d928e750f2679befba13f1d","sha512":"c79a24d26891a03c8b720cd480e06f74c8b7e89d1b3a7fb2b92a60544cb23b36ebbf1442a3b27cf78a10e78205c5d9253623fc5c141a9f700a1440f3cb67e837","ssdeep":"768:fQ+zRKacI1es1TDPaYIU5lnYpD9JQS7/CmWtF4r3IK6Aku7SMDhFy1:YqDesB3cT7/CmWtS5nkumMzc","tlshash":"502302aad5ed80a9ea6fc4f1c064758fbe1877e86ed0d84a60c63d737c278d20d450da","first_seen":"2025-03-01T20:39:52.078509Z","last_seen":"2026-07-22T18:04:42.188072Z","times_seen":50,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2FBUKTI%20JP%20GIF.gif","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.943Z","timestamp":1784743418943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2FBUKTI%20JP%20GIF.gif HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"5707ded6d49d82f05a9b2eee823bb1a4\"\r\nlast-modified: Mon, 26 Jan 2026 00:00:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBE01D5F5C5\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 324\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWL6lmRVKF5VupepZvmfzpEUWqUcSccOeBDr9Tc3fPkY%2F6wCxE0gI5tqt2yA2NsiYxX%2B7HsDMWOuwSEAoBcmh5lIW5inIbzwkb4SnwWybtQ5l8NplOOiXZmrc9By%2FCXYBaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45d006f045ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 701079\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701079,"size_decoded":702148,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 320","md5":"5707ded6d49d82f05a9b2eee823bb1a4","sha1":"bcf8a206b307cf3bc465d634ea2f3df80ac1a645","sha256":"ae480df8f83d55029e035ff8a0bed6b417405da341e05966c63b0fc42f0de9c9","sha512":"a50087b6b4aa74923da3d027044dfc23c7061cd90013122a55d4e1db382b4a014d18292730e946e2ae91ecf54e90f6026ce39d02101d9dd90fd6a09ea85d6c90","ssdeep":"12288:CGyQM7d2Mjp0U8q61YZhiemyyzUpFFzd7qPrOsQKZnihcjsEdSb/xrNoRo00Yp7L:qQcmhq61YZhieKWbEvQKZneHEdq/dNmL","tlshash":"52e423c09c3fca51d357119a2c2b2e831a11841d6135499fced17faa25de2e3b7f2762","first_seen":"2026-07-03T14:18:17.187039Z","last_seen":"2026-07-22T18:04:42.17611Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/css/components/loader.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.208Z","timestamp":1784743419208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /css/components/loader.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-b86\"\r\nexpires: Fri, 21 Aug 2026 18:03:39 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45d0208d04e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":1455,"mime_type":"text/css","magic":"ASCII text, with very long lines (2950), with no line terminators","md5":"f81874edee808f64a81f1c1994902cbb","sha1":"3077fa00bc4fe56438a060eefcea27e910563c74","sha256":"2f75efe3c598d795e95fade1746451bb15e1e950724f34155195d4d6e93180ae","sha512":"58e8cff6f6ac4cf5e774156acbce75317be115694ab77006b157fbf8beff629b6f0a70421cd8535f937e0385091998263e9c3e36b11a5f0624711e5d709df6e2","ssdeep":"","tlshash":"025133390a025411c157cf9261c57f69042ee9276a334d5ff2087bdcc7e295d23a5f9e","first_seen":"2023-04-13T17:56:31Z","last_seen":"2026-07-23T08:12:22.172327Z","times_seen":2217,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/DgDv7r3/TAIWAN.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.376Z","timestamp":1784743419376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /DgDv7r3/TAIWAN.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 527384\r\nlast-modified: Mon, 07 Mar 2022 12:45:01 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/YZQ8sBD/OHIO-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.362Z","timestamp":1784743419362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /YZQ8sBD/OHIO-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 498201\r\nlast-modified: Mon, 07 Mar 2022 12:38:09 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/js/vendor/parallax/jquery.parallax-1.1.3.js","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.198Z","timestamp":1784743418198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/js/vendor/parallax/jquery.parallax-1.1.3.js HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 May 2023 03:57:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466f3b1-3ad\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfbb92b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":875,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (420)","md5":"1508097fb2657eab7e68bd385cfbdbb1","sha1":"c65b4cb7750055e01101a4edb2f7d2d749e85174","sha256":"ba75543913b3258b7a19cdea608c7cc47322898d244b40b6190c970be2d3a2fd","sha512":"fb2b63f3aa3e83603dd8ac3211bd4624c00a0f534935dda13ad959121608d3bd7e3d5fa284c470692a9c57129ee665cc4a39bc4697d09c45841f506d9f5a7db1","ssdeep":"","tlshash":"0f115b38bb107255c96a762f0b3be309b21736415c028124d229e5dc6ea9a5bf86ac68","first_seen":"2023-03-08T09:00:45Z","last_seen":"2026-07-23T08:12:22.122402Z","times_seen":2499,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/g9xcgRW/BALAPTOTO-KABAR-GEMBIRA-840x482px.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.282Z","timestamp":1784743418282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /g9xcgRW/BALAPTOTO-KABAR-GEMBIRA-840x482px.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 153133\r\nlast-modified: Wed, 13 Nov 2024 17:38:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153133,"size_decoded":153500,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=482, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=840], progressive, precision 8, 640x367, components 3","md5":"852c40a90e1b84ccb8a7089bdb660c39","sha1":"d87564d9e8a95bc41d95ead373d58d0155ab6ce6","sha256":"48f7ad12a4d426e521059fbd62d87227bd9e7ce9859313d2c10ab75ce5c9c451","sha512":"3f6b1a9af677ac578d0b70a72cbc2944c5256af0bdc10707e06faf539a39860d1dc9078055381784cbb52a3184274e37c3f584ecc522ecc8277d0681b9a5b440","ssdeep":"3072:+AtA4vY+XGsxDfJckD8SZVuDP/hRXxQIJ2:+kLJ+kJH2h7x2","tlshash":"0ce312215e911e50d8f923b25cb5f3a30353cd8023d75289f91ebd9aebe52269c6da02","first_seen":"2025-10-30T11:45:25.888861Z","last_seen":"2026-07-22T18:04:42.242146Z","times_seen":8,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":130,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bukopin.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.351Z","timestamp":1784743418351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bukopin.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 24072\r\nlast-modified: Tue, 31 Dec 2024 08:45:05 GMT\r\netag: \"6773af11-5e08\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfcbcdb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24072,"size_decoded":24475,"mime_type":"image/png","magic":"PNG image data, 816 x 568, 8-bit/color RGBA, non-interlaced","md5":"757c9abf361bec9eec46d677b6a748b6","sha1":"62c3aa9d9c006e8cfa2684c825783fc14d51c6a5","sha256":"bec001371a4a50da1dfc0ab2e7e663ade386d124920b251f9e3bfebce0638032","sha512":"8f7e9a977b23a1bda9ebdfeb919aab009a54d9748c052de94ee9c2379b0a7e45b4310daff85e7c2766e24e58e921c109f439919dc48901e3ca54fb5639a40f2a","ssdeep":"384:EuHSOMHD95TMEs1ULEi1Oap0HOEAie2PhLuktGtJqS1yC99ZXx5zFYWnD64/LAeE:lMLUUAvapIOEr5KGGnq4z99hx5ZfLURJ","tlshash":"5db2e1eb1536d105d0ea813cc1a10b2daeb296772c3183616ad75dd31d2b71d6ff09b4","first_seen":"2025-03-10T01:18:36.814085Z","last_seen":"2026-07-22T22:49:40.950637Z","times_seen":147,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/vDyT78j/NEW-JERSEY-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.334Z","timestamp":1784743419334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /vDyT78j/NEW-JERSEY-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 479471\r\nlast-modified: Mon, 07 Mar 2022 12:33:41 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.countdown/2.2.0/jquery.countdown.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.448Z","timestamp":1784743419448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery.countdown/2.2.0/jquery.countdown.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://aksesbayar.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1985\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUga7JeupHLkEqIDLjZT8o9q3Y%2ByGV%2BALfT8n785WY2pNQfttCH4Z3APHhH99UT6Cann8fW7ObJrTer7SL4YcXjdLwu2GNomcgdFqmVZc7qKDgX5FmOdr4v0DbqOADgUuxB4%2BnDY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f45d038828a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5339,"size_decoded":2989,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4136)","md5":"5d3ff3c3fbaa67cc639501f44eeb07be","sha1":"bd66e4cd58de09c198e7abc77fa4c883955d189e","sha256":"2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f","sha512":"96d7ae443f9a50436b64f4d758544f4c17030f120659ee6ebb46a93c49fedd92980f00da104ac82bdaef474433506994439e4a144d91a864d5a19b0a72d18c57","ssdeep":"96:kbG5QHArNbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qD2O:fQH+UpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"71b1c6ceb3b213d5089553b101ae1506613bf25be4e6001cb5fceac87a65c5d607fd78","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T09:21:25.70852Z","times_seen":10991,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aksesbayar.com/wl/partner/status?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","fqdn":"aksesbayar.com","domain":"aksesbayar.com","tld":"com"},"ip":{"addr":"172.67.74.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8","date":"2026-07-22T18:03:39.750Z","timestamp":1784743419750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aksesbayar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Jun 2026 07:19:43 GMT","end":"Sat, 05 Sep 2026 08:19:28 GMT"},"fingerprint":{"sha1":"4B:9F:02:CC:FC:DC:68:FF:73:EF:02:59:A8:F0:7D:E4:50:B5:85:EF","sha256":"BA:22:0B:6F:24:BA:99:7A:56:44:74:3F:DF:1E:2A:B1:23:EB:35:1F:5B:B6:D1:E7:D3:15:EF:05:6B:7A:76:F8"}}},"request":{"raw":"GET /wl/partner/status?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8 HTTP/1.1\r\nHost: aksesbayar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json; charset=utf-8\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aksesbayar.com/wl/idn-iframe.html?partnerId=5beb4f66-dca9-49d5-947c-c9e6c46fb3e8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: undefined\r\naccess-control-allow-credentials: true\r\netag: W/\"91-+de4x713mBZLSMwCchOnZHHH7bU\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2t2PG9k5khmkV4nA1RugxwWYem5ZAbC%2FpGozHmdOiI3jd%2BlUutQfdxHKO5tj%2B7tuFcLpKz7GRkknenCLq4UTBhGcQ2OhNlhn9zXykSgkQYURaq7bzubv0racsr%2B9s444\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1f45d0569e456c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":145,"size_decoded":799,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9607f523392846f5a4d9d393db9e6b4","sha1":"f9d7b8c7bd7798164b48cc027213a76471c7edb5","sha256":"ca20f3e2785a2c2cb6a14fef6e5a29fd93bbc34d11cb6bf536e1c5b2cf540344","sha512":"32655273881dca76d5182e1de55bfbeeb740c75e0e28b08ff5ce49bbf9971eb7230065c1868ecc6d7043230dedcda3d5e355088bee89c0ac0762455d1eeff299","ssdeep":"","tlshash":"b9c08c452905a198d420c460e986287b1b80f82880a56ea8488d0024aea64740828e17","first_seen":"2026-07-22T18:04:38.934718Z","last_seen":"2026-07-22T18:04:38.934718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/style.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.139Z","timestamp":1784743418139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 582\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-565\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5fb94e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1381,"size_decoded":1030,"mime_type":"text/css","magic":"ASCII text","md5":"7948ca78fd59f3251d841d7ca5799933","sha1":"cf65ff1a6be935c9e9cbc1a3cf8253a633547318","sha256":"75010842dfd01763618136d66e0aba9164b30ec4dfad61242520c07e1df8a5e1","sha512":"008effaffbf9e2e764f573921f4dccca7b4ea88dafaccf1199a088a6843fc11749cac2737b42dc93885e0a70dc00b9f933e53eb46a4a4b2100ff5b5a2701562e","ssdeep":"","tlshash":"63214491f7c33667704a801c9ea1b5bc1f1b2287975acf3af20033fc8b846801c76999","first_seen":"2023-10-29T13:33:29Z","last_seen":"2026-07-23T08:12:22.170761Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/xzYBF2k/BALAPTOTO-MODE-BETTINGAN-840x482px.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.284Z","timestamp":1784743418284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /xzYBF2k/BALAPTOTO-MODE-BETTINGAN-840x482px.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 428597\r\nlast-modified: Wed, 13 Nov 2024 17:39:24 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":428597,"size_decoded":428964,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=482, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=840], progressive, precision 8, 840x482, components 3","md5":"4594da477d90a759b90ee8dcf0ffbeb9","sha1":"2e93db0461e4a11840fd925854489be4222c2cb2","sha256":"971a60822e455186a4908c297288c3b738c5cda5b818eae293b969b6a8f2cd3a","sha512":"30c115a0eba129e32f4b5c145d3396bbb0a3584210b51e9517237705a7a380d5a8106733492bbbcda9a60177e6245d2f3bcd9b187304c9c31f709c636f98e8eb","ssdeep":"12288:I7sYYDmoQR40e56Vy/a6dOt+ua2Bw4jM2M:TLeN7y/a6dO9Bw4E","tlshash":"62942371f297d411fae022b1fbeeca7513b25351915a93e4f6cfa61a4b16290c10cae2","first_seen":"2025-10-30T11:45:25.721185Z","last_seen":"2026-07-22T18:04:42.205726Z","times_seen":8,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":21,"receive":94,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/KyQDLcJ/NEW-YORK-EVE.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.357Z","timestamp":1784743419357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /KyQDLcJ/NEW-YORK-EVE.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 487004\r\nlast-modified: Mon, 07 Mar 2022 12:37:02 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/duotone/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.601Z","timestamp":1784743419601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/duotone/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 22614\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"3883c-qSljHysS3IPdY4w5UGwS8ik28CU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834916\r\nx-served-by: cache-fra-eddf8230063-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231484,"size_decoded":23375,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"713bc6f267fdd326c6579d5ff1e1343d","sha1":"a929631f2b12dc83dd638c39506c12f22936f025","sha256":"fc6d37f7f0f7ffdcdf714c54181fdd27911969e4737d3151b972d4b806e5ae5d","sha512":"9648284b6f49de754598e28aab54095a76d48c154b769051cd459dddf512ae1d59e5c114a581da298ff53d14edef1993b5c3c875cd384dadab10fe29c96b8b1d","ssdeep":"3072:b/GP5yanAhPUPQIBR0Js+XlS0/xATy6ZDa5aLGVEaXCt7A3C4jevbqjc4nIZqJ6/:DTsGYoohNBdr","tlshash":"5a3474e4b6bf2851a346f5c3118b9124b34ca21dcd5a9c1986e23cefd6d270dc6af18d","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-07-23T08:12:22.121455Z","times_seen":1939,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/css/game_compressed_ic.css","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.136Z","timestamp":1784743418136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/css/game_compressed_ic.css HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Sep 2023 08:07:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650bf9d0-b08\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfb5fa94e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2824,"size_decoded":961,"mime_type":"text/css","magic":"ASCII text","md5":"05fa3ce826ade67f9423c36dfd5efdc2","sha1":"634ec178c49df84b93c386e78b2c51336216f4a2","sha256":"ffba6e80680a3cc582c45c65033d427529ef1ff5dede865ccd878a4dc42308da","sha512":"aa26a856cd5bd8a4000ce5f15e69f19c96bdc1011d571e1082ed089c530623e50b7e92c59213f886d295cf0006630689c41d27eaa498b02ff633a56929ff2cd0","ssdeep":"","tlshash":"1e515b37299574ceb01985a46925bb18870d894af24d0e2cfa3efefdb70c0469873dc9","first_seen":"2025-12-04T05:42:46.011586Z","last_seen":"2026-07-23T08:12:22.130307Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/bt-bg-10.jpeg","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.835Z","timestamp":1784743418835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/bt-bg-10.jpeg HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"52305943329c8f1ec0e8243fd17eca3f\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BC0C7F18EAF\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20813\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKj%2BvcRpNZtH70KjYG9f%2BOXjd7HfwIzeiIzqGB9W3Xr2VQZbTw7bbl7QDJLj%2B53Z3O%2BIKbVSAgTr3FlWmWQMzeaxP6Mj1W92omHI9wrj9b8pAg4hx7HtapfTHtK1ni75YPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffbed75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73647\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73647,"size_decoded":74718,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 640x366, components 3","md5":"52305943329c8f1ec0e8243fd17eca3f","sha1":"7640a107b8e211a7b3d8b999ec66210e282df537","sha256":"f3c5a0b316277f438e00a013f13f524f1edeca2e1dd83ea3dab0dd0b849c6db3","sha512":"0a62a95edec5d50edd62b107d7d3663441ac7a0790cc9886a96029a3f7e3739db73f7a049423fa5d1150602d755160b6edc8cb36a8491ef634e32c219d3713e4","ssdeep":"1536:cEXJAOoQWCUC2PPYmoxUYZvK7FZ8mN0XB1CHRvziPedov2:NXqGq7PQGKvKT8m2XB1yl9dw2","tlshash":"bb7301edbb0df455d4e9313c24e283a7e6d332d8246f4294bc814ed60eba950ee4db46","first_seen":"2025-10-30T11:45:25.798601Z","last_seen":"2026-07-22T18:04:42.174876Z","times_seen":8,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-24d.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.312Z","timestamp":1784743418312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-24d.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5662\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-161e\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c224e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5662,"size_decoded":6065,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"68f536efd4d9cf08d6edcaf5ca4d7ced","sha1":"a4771384bf6e12cc4737cf2f3bbabe27aa503e09","sha256":"df5bfec8fd98e9195fb9f02960c1f2a06deb9f024dd04801a45b772feffbf5dd","sha512":"60e03089e2e87368b1af8e759e5f197b542388b0aa760d51f24a244504450dd4f94ec1c3b4a628eec42437b5000ce0caf7eb5de0af362bc5f495d60c7ed929f3","ssdeep":"96:I1BKRCSc/BDLJv3QNwNpaW/5aPmDS0wZtTWnBS7Ow3OhwFWBtoDxzD6M:9U5D9vANwf0sS06tqnk7bYPBto9yM","tlshash":"6ac15b2eb458bb0fcde8d6334aa9f584bc1d9d980752ab672c504899bb58877a887200","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.804813Z","times_seen":2074,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/global/banks/bni.png?v=iclg5ycncz2wd0elc7nb","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.319Z","timestamp":1784743418319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/global/banks/bni.png?v=iclg5ycncz2wd0elc7nb HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1242\r\nlast-modified: Mon, 14 Oct 2024 05:45:05 GMT\r\netag: \"670cafe1-4da\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc8c3b4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":1643,"mime_type":"image/png","magic":"PNG image data, 80 x 24, 8-bit colormap, non-interlaced","md5":"f4d6f0960f58c75167c9add1bba9ab55","sha1":"6a1f672e0cb1261eb33ca01cddd7a4ec4342529a","sha256":"50afebd206f7b1ef8fcf1d4dff496412a08518bc068319f97465908441cd4041","sha512":"ae764a25ef0050c0385dcc6b87239553e855d534c0026c81f0aba82072c1d81a19f79ac2abc517fffe5824234e075bb975703369cdd9f717bf1d5e7c5ecf7cc7","ssdeep":"","tlshash":"5a21ea8df0f40f1236917ef772ae5cdadca866b93db42b341253d5249904ab081d3367","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.950031Z","times_seen":2101,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/loader.gif","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.853Z","timestamp":1784743418853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/loader.gif HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/assets/css/btn/btn2.css?v=iclg5ycncz2wd0elc7nb\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5517\r\nlast-modified: Thu, 21 Sep 2023 05:50:57 GMT\r\netag: \"650bd9c1-158d\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cffc8924e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":5919,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 15","md5":"bc1bcccc4a3342d2063088deae7d17a3","sha1":"a1a988f912d3e17a908945750b91b508672ccac1","sha256":"a76090f2d604a7e9bd429900001b367ae94f52d749fd0f94706be887d87cce7f","sha512":"08c93c3506f083bfbe9ba6d7f9824f871ca145ed9bc431c248d3352a05cf23db90ae2f39bdefa532e8d16f29b623d3d91664753ee471fb606a2b082b6cf791c3","ssdeep":"48:0zXKn2kC7TYJJ3C+gXfU8wzXKn2kCdf4JJ3CUgPfU8GzXKn2kPJJ3CQgrfU84Wy6:K62K4fC62rSYfU62q0fI62oGfw620ifL","tlshash":"cfb1980de9d0bc05458de9c92de7d43a1b1108508ee8eeaaaccec8568a18077cd2d7df","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.117129Z","times_seen":2652,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@phosphor-icons/web@2.1.2/src/thin/style.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.591Z","timestamp":1784743419591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@phosphor-icons/web@2.1.2/src/thin/style.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 12153\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.2\r\nx-jsd-version-type: version\r\netag: W/\"14f3d-I+rOm+6NS9a6eVuIYVp4mWLfkZs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\nage: 1834914\r\nx-served-by: cache-fra-eddf8230104-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":12914,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8da44bea4949cc1139a518660885c864","sha1":"23eace9bee8d4bd6ba795b88615a789962df919b","sha256":"41e0eae512457cbef8f0106108fbfb995952c24b3e600dca38516990b441c2af","sha512":"54f5b87886bf98d90f76074dc83e0617445e0b6e709052ac09012edd1af4d8ffc02014a2e84d2797be11fd249c8e8752ffa907d4ee8f2b94493e32030e278fe2","ssdeep":"768:ziCfRFurGvcZZsAbW/whmSfO7SkYP4gXNLNdUzDtrMzeP:ziCfR4bVbhhfG+kkJNc","tlshash":"7183e0e4f5bf1a901b21d1d0238a1620bb2f922c9a461c5eeb6379cdfdca118c58dddd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-07-23T08:12:22.124108Z","times_seen":1870,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:40.047Z","timestamp":1784743420047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v15/Xyjz-jNkfiYuJf8UC3Lizw.woff HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://balaptotoplay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 01:43:52 GMT\r\nexpires: Mon, 19 Jul 2027 01:43:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317988\r\nlast-modified: Wed, 14 Jan 2015 22:47:27 GMT\r\ncontent-type: font/woff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":26588,"size_decoded":27400,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26588, version 1.1","md5":"a84d4b00b169826c4aea77a8611b1e56","sha1":"aeaff41dcc5caac07876a3931c86456aefdbd54c","sha256":"37e9d63421fa7b235c859737c6c65ee2ed95d79e7c49be0fe15903de908c2204","sha512":"38a4e96ead988f3a05efe819a2e146e85d409767b58950b18c6d8ab21c951469925b6ffbcd365536e45b22a8349f17fd4532444ddb4d7b9918dd46f160e1244e","ssdeep":"768:Qpi/npNamCBc356emikPENrOSc09aV5bD6M:kuJC6Jsi4qrOf09arH","tlshash":"5ec2f11679532818f31717f01cabbff2522207ac4cbc2caf50a49451175dbba5bb05ea","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-23T08:12:22.107605Z","times_seen":2610,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co.com/zJ3361q/BALAPTOTO-HADIAH-TOGEL-840x482px.jpg","fqdn":"i.ibb.co.com","domain":"ibb.co.com","tld":"co.com"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.286Z","timestamp":1784743418286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /zJ3361q/BALAPTOTO-HADIAH-TOGEL-840x482px.jpg HTTP/1.1\r\nHost: i.ibb.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 159094\r\nlast-modified: Wed, 13 Nov 2024 17:39:47 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":159094,"size_decoded":159461,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=482, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=840], progressive, precision 8, 640x367, components 3","md5":"e622ad48ab1e01bed60890db61f12a4e","sha1":"4445c45d2d069f4fa5e523f50d8feb8ad15bd8a2","sha256":"42476a0edbb0002de801ca35e4fd430a51b7dd3e0a93807a1132b00616009901","sha512":"bfa4b29bdcfce419bbfafa9ec26a871dcff6feb578f7b958b7d0ff3eafc9eb2df7cb3c32024789ac5a535c6aa5079fd0efd8ff4435cbb63ddc84b25a9773e241","ssdeep":"3072:fzR8SzRwrg0zDYB1oojId1flE/6GTv3NtuFcQHXuwzzw:fNjNKbsoQIvflk6Uv3HpQHXuwo","tlshash":"5cf302165711de93ede223b86af9c2c175bb0ac17252935abdcc754c2ff86e0ce69900","first_seen":"2025-10-30T11:45:25.865541Z","last_seen":"2026-07-22T18:04:42.384899Z","times_seen":8,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":56,"receive":244,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"balaptotoplay.com/assets/img/icon/icon-hongkong.jpg","fqdn":"balaptotoplay.com","domain":"balaptotoplay.com","tld":"com"},"ip":{"addr":"207.89.22.11","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.302Z","timestamp":1784743418302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"balaptotoplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 08:40:30 GMT","end":"Wed, 09 Sep 2026 09:40:22 GMT"},"fingerprint":{"sha1":"8D:86:70:B0:4C:4A:3A:D0:AD:B2:1A:E5:91:D6:BC:62:FA:1A:5D:EB","sha256":"CB:2F:23:BE:06:08:07:20:B4:81:D4:D0:A8:FE:83:C8:5C:66:5D:1E:43:DE:2B:2E:CE:DF:65:6A:84:51:5D:B1"}}},"request":{"raw":"GET /assets/img/icon/icon-hongkong.jpg HTTP/1.1\r\nHost: balaptotoplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nCookie: __cflb=02DiuHfbWCmfZuEsvzNksREojWo3T8Q3F2Diqpqb5t9bz; __cf_bm=eu2lY62JPykWrmtaA8pvCFjOIziJ6KlfF3DoqaRISuw-1784743417.4680612-1.0.1.1-Qvswu0KMO9VWzp1YJyUGQ8.46QOGgpC43nhiBeCjopBGlJehM7Auqik0FMFv5fg0.bndQLLTVJkFzggWhquv2Gl3PoZaKCdDveEd4.r6T0vaPsCChVTZL3subejaFoqT; _cfuvid=g1pZ2x1vKGjVDRDY16npqBkyJhmkxaSWxX4EexLcQWM-1784743417.4680612-1.0.1.1-ozSMpZ0LlD6ukwC8FEpIny0c2Z_dx1juxnAa4ebLAOQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4709\r\nlast-modified: Thu, 21 Sep 2023 05:50:53 GMT\r\netag: \"650bd9bd-1265\"\r\nexpires: Fri, 21 Aug 2026 18:03:38 GMT\r\ncache-control: public, max-age=2592000\r\nx-cache: MISS\r\nx-cache-hits: 0\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a1f45cfc6b8f4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4709,"size_decoded":5112,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 210x205, components 3","md5":"606bef132f2c25652dd62b4e7a5ff71e","sha1":"2e75d728149ae3c864f8f2b827841697ebd5481e","sha256":"8b2f204a6ecba604871a339562709f1194ae9ab0a2c8ad61564e4788682b9f2d","sha512":"4a27302f6ec32081e6bc4470c7060451c73b81fb3ba99f387d7770c8848de966855aac85b9008481389a57264a484aa45b7d2e6d1c932d6d444172606ea66708","ssdeep":"96:tHEgHiDK8H0HbHtptQQWnOAEV6OIyNhQN6JeVyN:hXCv6H7WNU6yNhdJqyN","tlshash":"79a17d94436141e07e2cff39a9524e390a805c2d5d88e36fd31f3f84247b5baa824fa9","first_seen":"2023-05-02T15:39:28Z","last_seen":"2026-07-22T22:49:40.845384Z","times_seen":2051,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt/slidemobile/TREASURE-OF-AZTEC.png","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.850Z","timestamp":1784743418850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt/slidemobile/TREASURE-OF-AZTEC.png HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"4d8c9dabe53b77de7cb4fbc52e301214\"\r\nlast-modified: Sun, 20 Apr 2025 06:18:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBDD9C775E6\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 325\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20826\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eB4Jz72%2Fx%2FpZOoyDq1CvHTqc5QOzQplANoDUceiNAlLZFoc14Nv22y0k6adCkrxsT90Z9id1g59hZkvV4oURkLL3%2BXJK%2FRx10sHDgADvSmSy%2BS%2BxANXGH8t608PmsBImws0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45cffcee85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45030\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45030,"size_decoded":46104,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"4d8c9dabe53b77de7cb4fbc52e301214","sha1":"63bb3e54cb7b3717c4e1f3406402d3f9b7d85835","sha256":"1f5c77a4dc71931940568fae15d87d43d23c067803a3d7dca56d9aeb96f38960","sha512":"e4f32ccf34b7c8012d1a438e5eb7e12502c8f39192695df4b9ba9279c5c896c9b8236e6f67baa9967773d13d27d3b853378aab4ae20567d1e95be6400869e7cc","ssdeep":"768:TwYEtoiLLJ34uvpOHZRgv8UldX5PnrNLWQqDkV7Tekmo4I46ud/SkoMZVHVMIFG:0//3O4v883PnhLUk9yyDud/NoM6h","tlshash":"fe13f19fd0224f50eb8563813dd8f70ba4d940b9cab54a5a27c6cb1599cc5f824d923e","first_seen":"2025-03-01T20:39:52.079304Z","last_seen":"2026-07-22T18:04:42.192553Z","times_seen":51,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myimagefell.com/default/bt%2FPROMOSI%20GIF.gif","fqdn":"myimagefell.com","domain":"myimagefell.com","tld":"com"},"ip":{"addr":"172.67.212.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:38.942Z","timestamp":1784743418942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myimagefell.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 13:01:00 GMT","end":"Thu, 03 Sep 2026 13:58:27 GMT"},"fingerprint":{"sha1":"40:18:97:44:4E:ED:F3:6F:C9:C5:1B:5C:5C:58:32:18:74:3A:FF:9F","sha256":"85:88:55:BE:20:E3:EF:A8:AA:6F:E6:90:D1:B5:BF:C6:75:3A:07:20:32:04:BE:B1:91:EF:24:87:7B:A5:C0:D0"}}},"request":{"raw":"GET /default/bt%2FPROMOSI%20GIF.gif HTTP/1.1\r\nHost: myimagefell.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 18:03:38 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\naccept-ranges: bytes\r\netag: \"fa50d0c86c594bb535bdfdf79910e123\"\r\nlast-modified: Mon, 26 Jan 2026 00:00:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nx-amz-id-2: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8\r\nx-amz-request-id: 18C49BBE01E861EC\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 325\r\nx-ratelimit-remaining: 323\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31536000, immutable\r\nage: 20825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f03S1Tqy3hFZ5AnDpJLzsh3RIou89FmIO7Ia8TX1AsCAZKZ%2BwlroSSezxaXFFS4JlDFMqoQEk3wE0hXy8bJAYd2i%2F6NDtFacWXPh8T66MfSoEiWDCUkFqg9T8S3h18h%2B0lM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f45d005f025ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 593410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":593410,"size_decoded":594479,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 320","md5":"fa50d0c86c594bb535bdfdf79910e123","sha1":"92420562bb25651f364ce4994ed9de8473848fc6","sha256":"9cb17b82cc858376cc1c3e9d6d904b775dff0cb60214b5f50619f87f140ac6d6","sha512":"6e01684560378afaeaca56f04e2962fa6ad054abf59d453274bac4358f2fb1a1a00e41664034b131b8cfca4937e0575707846333a3d1da0bb01379825b603315","ssdeep":"12288:uqay/cbMKpGCJr6fmZDovmAQtJltoZCzTgSjy2iBUU6Sc:uC1NbAtbBylt6Sc","tlshash":"82c4234fb3646ba1683bb85e07ac9ee55315341c74a37b5e02c4be123d6731336e2a93","first_seen":"2026-07-03T14:18:17.110154Z","last_seen":"2026-07-22T18:04:42.25132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"object-d001-cloud.cloudstoragesharingservice.com/banner/image/promotion/IDNTOTTOHK.jpg","fqdn":"object-d001-cloud.cloudstoragesharingservice.com","domain":"cloudstoragesharingservice.com","tld":"com"},"ip":{"addr":"104.18.17.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.124Z","timestamp":1784743419124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudstoragesharingservice.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 13:04:01 GMT","end":"Sun, 18 Oct 2026 13:04:00 GMT"},"fingerprint":{"sha1":"81:C9:4D:B9:5E:69:7A:B0:BF:EE:16:07:09:0E:5C:7A:19:5B:FA:21","sha256":"A6:A5:1F:B7:00:5E:82:4A:51:22:67:26:9A:31:62:12:42:05:FF:19:A8:2D:E6:63:9E:28:2A:DE:F2:EF:4B:25"}}},"request":{"raw":"GET /banner/image/promotion/IDNTOTTOHK.jpg HTTP/1.1\r\nHost: object-d001-cloud.cloudstoragesharingservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://balaptotoplay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88744\r\nserver: cloudflare\r\nlast-modified: Wed, 16 Oct 2024 08:12:30 GMT\r\netag: \"670f756e-15aa8\"\r\nx-frame-options: SAMEORIGIN\r\naccept-ranges: bytes\r\nage: 2823\r\nexpires: Wed, 22 Jul 2026 22:03:39 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a1f45d017ea50b55-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88744,"size_decoded":89147,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 840x480, components 3","md5":"a68cbd4cadc54ae7c2bdcb8bcf4c13b7","sha1":"4e8ca505e4b8ee0f154d9446d44e98769fffccdf","sha256":"cf91122176ba6cadc04f42930dd19b4f8db1b670efcb5b9d8cdc18696e3d1a65","sha512":"58a3e5cfb5a3d9faa2cbf7508765c96f1cc37266f0dc839b84fca1d8c77cb717eb277eddafa93decd163ebd06c2facf7e9cbd0612818a17038c3b22bea548f41","ssdeep":"1536:QPc1JYCEuB4veZYnmyKx9wwwwwwwwwwwwwdTa39wIQBqoQYCrPcXHYoXYwQ/NAFZ:/2CbUnmyvGwIJ3DRcYwENAP","tlshash":"fc831209cda5adf3c987f67993301364e3b1bc4dce4635de44fcc29922a60506d6abd8","first_seen":"2024-10-22T04:17:53.670323Z","last_seen":"2026-07-22T22:49:40.740441Z","times_seen":1516,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/r0hLRXB/MICHIGAN-MID.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://balaptotoplay.com/","date":"2026-07-22T18:03:39.328Z","timestamp":1784743419328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 20:55:27 GMT","end":"Fri, 11 Sep 2026 20:55:26 GMT"},"fingerprint":{"sha1":"F3:94:FB:2D:47:B1:D4:D5:DC:81:D4:82:60:28:41:CA:E0:2F:C4:E0","sha256":"94:AB:9D:4D:48:FB:E5:4D:C0:DD:70:56:04:C3:4D:17:1E:AD:6A:C0:02:2E:98:A0:1C:47:DC:AB:AC:74:E0:81"}}},"request":{"raw":"GET /r0hLRXB/MICHIGAN-MID.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://balaptotoplay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 22 Jul 2026 18:03:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 495124\r\nlast-modified: Mon, 07 Mar 2022 12:31:06 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:51:00.031316Z","times_seen":17476821,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}