{"report_id":"b310c602-80d2-42ea-b6d8-c2b15e7e6667","version":6,"status":"done","tags":[],"date":"2026-02-27T18:29:34Z","url":{"schema":"http","addr":"quadbet.fun","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"104.21.41.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"title":"QuadBet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"quadbet.fun","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"104.21.41.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T18:29:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:29:12Z","timestamp":1772216952,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":33636,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:29:12.425634+0000\",\"flow_id\":629757674271177,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":33636,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-02-27T18:29:12.405961+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-27T18:29:12Z","timestamp":1772216952,"ip_dst":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":45196,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-27T18:29:12.684858+0000\",\"flow_id\":1421930032282597,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":45196,\"dest_ip\":\"173.231.16.77\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api64.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":917,\"bytes_toclient\":4650,\"start\":\"2026-02-27T18:29:12.408549+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-23T08:58:07.99797Z","alert_count":0,"request_count":3,"received_data":813,"sent_data":1212,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api64.ipify.org","ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2014-01-05","domain_rank":26688,"first_seen":"2020-08-17T05:58:17Z","last_seen":"2026-02-25T20:53:45.34837Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":406,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"igamewin.com","ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-15","domain_rank":3209518,"first_seen":"2025-07-13T14:56:32.178324Z","last_seen":"2026-02-27T18:20:44.389328Z","alert_count":0,"request_count":7,"received_data":573258,"sent_data":2880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-22T23:25:47.841062Z","alert_count":0,"request_count":2,"received_data":785660,"sent_data":776,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-23T04:50:45.056452Z","alert_count":0,"request_count":2,"received_data":815933,"sent_data":752,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"img.utdstc.com","ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-10-18","domain_rank":661585,"first_seen":"2014-02-12T20:21:29Z","last_seen":"2026-02-27T18:19:30.835781Z","alert_count":0,"request_count":1,"received_data":16120,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"quadbet.fun","ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-27T18:29:35.841457Z","last_seen":"2026-02-27T18:29:35.841457Z","alert_count":0,"request_count":28,"received_data":1922988,"sent_data":14203,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"2.23.13.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-02-25T23:36:35.16741Z","alert_count":0,"request_count":1,"received_data":3256,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api6.ipify.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":226847,"first_seen":"2019-05-13T11:53:14Z","last_seen":"2026-02-27T16:11:48.515479Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1215,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-07T19:00:53.488036Z","times_seen":48376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12d4b8b9ca3c7fd14384bf5a8faa82a0","sha1":"6f66ab3f370c29cc70a44381f84e675823f48e05","sha256":"18a18caa22fb8794cf3b3ece0c5a270e456d626c5868a82bd52db00e0dc2cffc","sha512":"7eb559e76dac3d99af691fd2342ea29bd82af92104840be7b8d256a8be98ad84759f3032fdd74b0b8f100ca252ce82edc1996c8fdddb6f56dec939f0f7fe06f7","ssdeep":"","tlshash":"7a8000ae0082083a00a000000a232a32332b0822008e0000e3c3032ef8b20038008e8a","size":30,"data":"","first_seen":"2026-02-01T08:53:43.725051Z","last_seen":"2026-02-27T18:33:02.591422Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/includes/ipfy.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","size":2326,"data":"","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/components/auth/ipfy.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","size":3202,"data":"","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69a1fe33ea0f4a159f17b756891a0805","sha1":"78b7af66a99469f0b7cbddb1fa46878736a7825e","sha256":"c18ec14b5f76a80d9bc3714f49b7d46ecc981e7fc7cc96e1c6bf7331dac4009c","sha512":"f09e2593a3d39f4c1203c7671dd4532aaca4c2712d8724f890ff52274ee859881f5bb1ac77a809710ec2cbc81697e1b36fd1ad95f12a8dbb3038f39da623d0df","ssdeep":"","tlshash":"1851529cb464507455f64504cc9b2706163abb737cc680e1faba98693f3dc077503aee","size":2514,"data":"","first_seen":"2026-02-27T18:19:54.233054Z","last_seen":"2026-02-27T18:33:02.59215Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0ab6384cc1014ecb2b95b649e2ec06c","sha1":"fba270bc4d2084425f0153bec24b1e53de164775","sha256":"88d848f10f7eaa6b6deff692b86ec4fa95580fbb3c69bdffbd6fdaed48dcf59d","sha512":"7a9c0e9459f9b999f5758052266e8f0f66f36d84a1292cb8949a8b11e63e6e7348e95e2d376486b4cc4dfb37853e54f0193374c5cf6fd1fa563bf5340394e2ef","ssdeep":"","tlshash":"2580002e0082083a00a0000002232a30332a0802008a0000a383022eb8b20030008c8a","size":26,"data":"","first_seen":"2026-02-27T18:19:54.238245Z","last_seen":"2026-02-27T18:33:02.592885Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"674dcfff2bd509ea39a280910890c9b6","sha1":"b4a8862cd26b916260383fa130e674d8d4192248","sha256":"719d0504e79a5fea70038ed97c1c55dd3cc2f4045fe5150e7dad98aef498fa32","sha512":"5c49f7fbc59e08b1b820c97facb40419aaef0c0a1fb68566cd357a5a88dbe130a06cd84a0137df8144665535597c30aa56e09e7bfc43f94265f69a41b5e906c7","ssdeep":"","tlshash":"8741befd30a1213a09fb18de75ffd2847a359487b0c6d821719d460d8fa4a8a8422edc","size":2126,"data":"","first_seen":"2026-02-27T18:19:54.243777Z","last_seen":"2026-02-27T18:33:02.593546Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f0aa8a28297ae192f4292419c06f4e","sha1":"8bdf7b7e6c665182b1540613aee99ee15d876700","sha256":"efe310a1e723ec66762a92df8d301e9dc3050246274d52d9869cbafa077cfa48","sha512":"3fdf6a64c22b12ed8e40c1d163bca752b8d6162e63b1f226bf2a0b07ac85636a1d6a33941e8ba2ca8e11596666b87fd1e698fcd74374ecf1061b53aacd017480","ssdeep":"96:wnJeNetj59WhOQgg3sggUpKq+wO/tkZptk0gv5cgbNoak1g/srw/hb/oW/:wJeItj7WcQgUsghpKqJZo0gvjbNoak1a","tlshash":"55a1659639b5143049f758eb36ef86d0756a445a7cc8c8943bac88885f73b808673bdc","size":4745,"data":"","first_seen":"2026-02-27T18:29:39.7033Z","last_seen":"2026-02-27T18:33:02.594259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a370c306603cd419fcbbbd07259bddaf","sha1":"fbf4c0a484b118a246f2a1649d4dde7efbdcc9ee","sha256":"a497f4b8322968cff0456a2fb8fc8714c0eacb5a30b58d7190b0d267781ce498","sha512":"8aae38571212e2a136b059058f3dbe332e9f0fcef2d8d6c93b6575f4800b75e2633b28b444985d1fe0c8e9534f72265f85c316c45ba99f90025848ae1858c723","ssdeep":"96:OlKZxiiRXpdPKVlG+kpF3q5VbzQ36zPXDn42EXdn7datyqt9HHtxG1AHic0WTy:OpCb+jTzQ36zkwNdiGTy","tlshash":"d3b1de9eb9be317645bb3b7fabdf696c213280430c09c842797c95802fd48645977ec9","size":5230,"data":"","first_seen":"2026-02-27T18:19:54.256604Z","last_seen":"2026-02-27T18:33:02.59545Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-07T19:24:38.971578Z","times_seen":416030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87db2426701d1b46802a56e3eb641903","sha1":"14842647b6ec8d92c73739cc19820cdfdef81e81","sha256":"445e3fac3872a41e866d82e5525a908779df09a05f9188180556c7f11b6b9c88","sha512":"a06b8104bccf4bc27b242733d6ec735442f4b463b7a55b50d3ee17dad08a4beefbe68ebca9b485718d540d75a4f957ca00beb10db4471120a9af9f8356492b62","ssdeep":"","tlshash":"0181ff6fb0f2243644f738ba36ef92743535800364cac4193aed864d5fa294689e36fc","size":3826,"data":"","first_seen":"2026-02-27T18:19:54.261938Z","last_seen":"2026-02-27T18:33:02.596156Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da98fe47ec1638d7c68f026bd2a002a8","sha1":"6051f6aa39bb4464e32180cbaf56fcbb3474c49c","sha256":"738f09ce8adeed3b6dcc3e006036c2efbe8b5d28198c38f7f0e8cf9c37d17564","sha512":"a217ab7bd53598ffc931f68b45a17e2d1d5d7633203a8656bd9bdcdc56039ca0ea4be2a4943a2e06972441c2cc82fa8512d724fac8f85be28eb9d4bad8fb585d","ssdeep":"","tlshash":"75319c053ab710f44433009a166f97416634b2377056cca8364ddba8ef92d94aae779c","size":1793,"data":"","first_seen":"2026-02-27T18:20:48.97815Z","last_seen":"2026-02-27T18:33:02.596761Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68e5c22bb883ae3284cac5b602d86b6a","sha1":"de01935ae2e6f4017722deef7dc650629fc4edc5","sha256":"5d46c1f488899b5179c7b0331686266b72403d01372d277653f73c159c7b7f8f","sha512":"c9fd7a51251daf356a2a857f43ac9fdf689d20123c5f15741464f9fffa23a7d3ed61742cd25c7234f0ad4816150459d064ea2876e74a80a3db574f6ff837c335","ssdeep":"","tlshash":"a6c09b483c90b120003710671a3b134cf4a141753904dc2015018b65be740ffd43d9cf","size":131,"data":"","first_seen":"2026-02-27T18:19:54.27145Z","last_seen":"2026-02-27T18:33:02.597457Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c6ab34ddec796551282825a06e3a99f","sha1":"9bcd48b08db701a931b419bdaf4f20d47aa12878","sha256":"1c37617aa05128d6d31c392f62b79350f72f5a8737f3368699cb712eca116fa7","sha512":"bbe68e1de287999f32ac145ae53e2afe86a417981a8a95f5fe5ca996830899022fee4f61a721e67fec62435a71d1a5cbfb8cb9171bc24a3c763231e0b81e3605","ssdeep":"","tlshash":"5581b41facccec2ce5fe5e912ddb360bf0df404786dd98218ebe9a28d81668254255d1","size":3905,"data":"","first_seen":"2026-02-27T18:19:54.276717Z","last_seen":"2026-02-27T18:33:02.598442Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e596e313324c4ed026406ea705cc985d","sha1":"a645a2b2ab1ad8c0894c3cfc05135e3e3c84ce0d","sha256":"b3637df0c24fab2034a4aee19ada5da9e14b453361be4dedd1b9f7acdc51c663","sha512":"ff51fcb0d5f1cf27022bccf543735e8e8052a9fe6cba8e41b0e30c6c427506967a0db59f4fba92fc92cedede51515e4b559f88a710459dadaf49eee6dabd34e4","ssdeep":"","tlshash":"8881845e61a318bb0037e0fa62c377b634a42263f587cc0c3b9c47965fd6c649a66b74","size":3905,"data":"","first_seen":"2026-02-27T18:19:54.281841Z","last_seen":"2026-02-27T18:33:02.599161Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"990f86225e18f3e5dcb14aae6e6d4b3f","sha1":"784f4717019e77394b5d869fe78c2b18824af3da","sha256":"66f6a9cd91b5dfe753db5df4e5ff3c775767934a9b61c5650f63a2be909f080f","sha512":"a571832cbe70e639cc315d4cd24474d60254a15530082a28b9632c792e2a9d84dd4307a4a3a15801b36363ee9f320151abbb0a399dc5f3e2c9a7198cd8cc1976","ssdeep":"","tlshash":"aa51e10f3dd8dd3db4f716a5090b334f70eb949bd8daec450ee8eb5998683c4406a561","size":2885,"data":"","first_seen":"2026-02-27T18:19:54.286769Z","last_seen":"2026-02-27T18:33:02.600186Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71b9696796b2158dd5805f76f5ace4c1","sha1":"43c3709d8f82e3be88c550be4452c395d68e3a75","sha256":"98d42db035736e3ee68fe1342f01c587642cdffc60a248f4296aac4952b11143","sha512":"f30b592215be4aef5a7d5a2c2688f7f2c5972561ff8d233a5dcb9c32ea7cfe3a7e930d0d0eed4f5c6b1a74e0d0bd370fba5c7cf75857a1a18638a8ef49b70c95","ssdeep":"","tlshash":"0b81772961a329760037b0fa66c373a534686257f587cc4c379c42a18fd7c696625bb8","size":4025,"data":"","first_seen":"2026-02-27T18:19:54.292043Z","last_seen":"2026-02-27T18:33:02.60089Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2dfd47c6f36dda3daa52d3511ed5606","sha1":"c89894585feb11b8aac7a9650e647c0cfc9881a4","sha256":"c824a520d50a1fc5cd149f2438fc64b096b8a51aa3694411f3e291ed9a69f2a8","sha512":"70a0e16169f69c0efe8fd8d4dff098e3096e65fbdbb8b8729e25c72922e6bc11e767ffa8c02aa057930910921fb931b9e51634894764019a2bf5e91d1c793092","ssdeep":"","tlshash":"3241b0eeb1f1287408f721ae2ba789943531809760cdd4203fad89cd1f669c58e73ad9","size":1915,"data":"","first_seen":"2026-02-27T18:19:54.296472Z","last_seen":"2026-02-27T18:33:02.601526Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56f546deaed761a207d02cdc576be5f8","sha1":"214c2a374349d01cfe5c70e5e1f712f4e133c4b9","sha256":"7ad746caff8778ae70fccb4bbdda77c6739e4fae5628acc76e44610909ec72bf","sha512":"af3f2d18461cb3cf81051721b2f0ff640c3b99e8c0bf98a26308ff416dfb4edad7066aad764107b3a6bb03cdc043aad93f539fdbcc6698c57ecde5c97fb9b447","ssdeep":"384:SEccMxSSa2wumtIJlS8wFGi+cP/rraywB:SbBwdFMi/rIB","tlshash":"aa425ecabcf3247510b7767a2bdf9944323a44070ccac9507dacd9115fe2b868966bf8","size":12376,"data":"","first_seen":"2026-02-27T18:20:48.98267Z","last_seen":"2026-02-27T18:33:02.602128Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"quadbet.fun/","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T18:29:09.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTGvvd6YUgUQdUL50QDNiczX4hNAMnDE0woe%2FdNhGeeeMy5epF2uOQLJQe7AAmHfYzv41jLpmYTUCYSHn7J%2FAoaKFcLEYUshWPbh\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d49beff5803aa08-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":327432,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (863)","md5":"5c2a983d7579ab433051f0c22824628d","sha1":"3550505ece0fdb8d0e5460ca4cec48c19cb87637","sha256":"22e51904574ae048f6e75ee5913785c0d082188e9e4ec23eecce6c7ccc143824","sha512":"3e9925b0baf09b1d65b791885ac257d7ca0a5e3fdd4ec1632190e842f3aa4f1c0e8f1418dd6284159006134772012d26b99d3aca1089b97594ab38a8a46bf3f4","ssdeep":"1536:Ucz+QJFII8I6++M4IxwyR98uNgGTc+S8IGXGUx4SlPQ1SXmK97OcGDCT4x4SlPQv:Ucz7wHYlGmPkqeLo3nQNu","tlshash":"d464e7a1a1f241ba5053d3d12e671b2a3d699493dd0bca8c7bec46a45fc7ccdc823ad4","first_seen":"2026-02-27T18:29:39.673823Z","last_seen":"2026-02-27T18:29:39.673823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":86,"dns":51,"connect":8,"send":0,"wait":217,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/rio-fantasia.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/rio-fantasia.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 30325\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-7675\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s33fcQGZqoH%2BWoxurFem04Q5kwNQuRggkYyGhHP8Ox3vgRuGmml50Kjb2p2VdEHOtMz%2BKJ%2BZ3NVz7x3CdaF1NKCL3Zc7eWcrB7w8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2845dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30325,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5fa98b9d3609f2547b7efac5bd0c0674","sha1":"22009e9fde28783cc5efe113a43bf18fcaf321b9","sha256":"cdc62707089041b094b18b3b593ea3e6fcaf055328aecf1d8695c2c4d9a112e6","sha512":"2ba5779f39638c99a7a10636ff39b76540c731a79f9a210db27c6cf835e5454aaf195e197f11f9a850e69f4c8d430c74c77fe978dad9e3db223929da1d3306fe","ssdeep":"768:6bgyx+ckheKfKscSEiW5cefS/+CxMdvDqXv:60tiXcWPfS/+CxMq/","tlshash":"d9d2f2cc53df0054ee21a3bee72493160993b3db924d367ec1b18176a1772ea248d6f0","first_seen":"2025-07-12T02:50:09.757229Z","last_seen":"2026-07-12T15:15:11.652426Z","times_seen":18,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/fortune-ox.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/fortune-ox.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13789\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-35dd\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2B99VuUaGJPu4JwN%2BwUWPZWpkBugGlnZCLl1aaYgI%2F1VWZkJznCFAM8gsTVik1gXXZXTb%2Bm2DdEwM3yIJiKxADQM6hImsdYgHkew\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae3345dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fb341b0d27383a57252c3fa963361571","sha1":"5430b57e39d5ae7154cc57b375fa531c444d39b3","sha256":"736c419c55913744a1ab7bb03980e433debf8b9b8dd608bc00bf5ec0bcd7bb41","sha512":"cb65461c4a410b7ed5b122491e4d7a72cbdebf3c0fb7c386f13e40497e9f4cdbf911ccae024653bd5c56b5de1d289331899a1e711a9cfda19831f6cfbf641ed4","ssdeep":"384:NkJwlBmWkUQfxM4hgqLmaCxGv9e/omkolu7+E6eXOad0:aw6ZM4vrgGBolm6kv0","tlshash":"4352c0ded3e51f10d8b11d7903d7ef1732b665d36f237384c4d513941280b6a9a24a5c","first_seen":"2024-08-22T23:03:44Z","last_seen":"2026-07-28T15:15:09.269645Z","times_seen":847,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/fortune-dragon.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/fortune-dragon.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nl3L2sGcCbXFcE0G0OwPMDx%2BJvoeY9IyNLQk0UzQv8cpCjPhJ5ROB8zdj2haCN1B7ajNyqraHA5R9D4nNuJ99iVyPjz4zt9MxYkM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf11992f45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"52e17d0fc450a75c9b5d031ddca5653a","sha1":"93f4cdda94e9ba02b08bc300752d5a8e42c861f4","sha256":"ed0de8ed82f1fc89f6eccfbd6e741680e4cc62328fed2c11b1f9d6451e69f37f","sha512":"a9ff37731a867200a595d664b1da30011db828769105a6d524fcd4815447ccd30295cb4121e5b99e920f8ea76b34932c37518c8f98e25b2c55b516e49de98df9","ssdeep":"384:wqGivA+O3bUGqZc/NArnn4zLhB9h4IwIoNK2R9pknX/8yJGjM1eR4f:yQOVqOuT4/9hnwImK2lOvkjMt","tlshash":"f272d073c3816caae41b457281ce551b4dca99049baf3e248f3c39717eee576611063b","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-07-28T15:15:09.10563Z","times_seen":787,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/wild-ape.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/wild-ape.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 24226\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-5ea2\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cSDc150zK%2BrsLAYSLqzQZJrBqvoQW718tT2vKowjOUYtoOW%2FzgGrMyJMAtNiEbKj%2FeX3ntcKmfrkLd5LMN9dRYDcMchgBJ5GvmS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae3245dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24226,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"26936b01ef861127cd0288d0e40b8714","sha1":"6a342e88c805421b759a7e6eaf98944aa4cf2e14","sha256":"de289fc708b507cfdd867e0b1dae77873513400f2fd9e3d7e1df63f27871a131","sha512":"8572b44de9c0e93989caef2c217b6c276ca28e4d3958b9b98f907696ee0dc557617ece11496e4054878736d77b0707f54536a54417391c745721d83d5cfa0ef6","ssdeep":"384:z08KmF2fjmg4CnoTi44evBrslaMD5ClmN/DC1lhjbTQUTE+PUrtJP9QDN:XTTlCDmm9DCv5bbT/PydKN","tlshash":"71b2d0b103a18863a0fd0f71013717f52ab18638764e667fbacd9bd1634b5d8e62e294","first_seen":"2025-03-21T08:06:36.392635Z","last_seen":"2026-07-20T12:20:52.441795Z","times_seen":268,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/wild-bandito.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/wild-bandito.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 19199\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-4aff\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1bFAUgXyGeJFCdCgBm6NHfxNKF0sYTWI4UgkDgfiS2IHzh4o9gv9d7NnWaS06%2B3neavwOmGrz29lJXqKOwv5lnOGXgL0vNU7E1F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2b45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19199,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ae421a141d6c0e7620b7a8a90b1f3674","sha1":"d20b4efd07aae018860e08cd0f971f640550fbaa","sha256":"200d49219b53798358294ecc9ee5b372c2f5637dc7a2fd3b375a06aaf091cc9c","sha512":"3d5505a04d354d6b26bdff6e8e55e5e2bca26f39291b153870a3c953d2a0515176003c8a1ca7c8f1439b0fe29055c31d246f84ce4435308cb6b9330e596a7e81","ssdeep":"384:Qbb0wXHn/A13pfU5ob5S1pOO8fObbojhQUzl6f0ydjlxb0DwGfXGJK:Qb7XHn+ZAoIpR8fObbon29xUwGfP","tlshash":"c082d1f90e71266bc57ea871045db0ac4bf5fea34499201c7d4b15143395ffba97221c","first_seen":"2025-03-29T12:14:17.35387Z","last_seen":"2026-07-24T21:50:00.492243Z","times_seen":210,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/fortune-rabbit.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/fortune-rabbit.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11181\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-2bad\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LYuQuh01n8nCJJHC3suhbmbcpmrc1Wa1q4wgcsFEBiewKYcgQEURTyqIG3R5yOwOGeheeko4W2MZeWMYLPUWSbpDjMdd15xuGAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae3045dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11181,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7843cba1234991b9e069d65f9bb63e95","sha1":"6103e667da7e3ce1e3b1d437890b45e4fa199931","sha256":"c03e4edb9e1979b0bd8460529c7ffbca96401634bd258cedbf98dac4bcb95cf2","sha512":"bc7b82b4e967fce8b78f5dd958eecac6c137dfce2905a135ae917af9d85b9975bb6d6b7aab81dd32912680b89978bd58ba12131b37c403c0253d9092de278144","ssdeep":"192:+GTUEhAhkycltD4gcN5EKcbcZhesYjkMBt8TZoSGT2FyozYgMc86:9rAhQlTjMhedjkct8No/TayhgMcz","tlshash":"b532c013038c7dafc552c0f705cf199a769b49805ba176fbd191b7a1826cdf60f80c62","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-07-28T15:15:09.114877Z","times_seen":883,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/128/15893/15893294.png","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"2.23.13.26","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Jan 2026 08:23:10 GMT","end":"Fri, 17 Apr 2026 08:23:09 GMT"},"fingerprint":{"sha1":"35:11:C8:0B:80:96:AD:22:F7:3A:39:64:23:9C:BA:29:79:BC:62:E6","sha256":"EF:6B:0D:32:38:67:85:54:A8:AE:C4:9C:45:C6:3F:78:AC:7F:95:D6:F3:FE:1D:31:D7:1A:DB:82:1B:3C:AF:3A"}}},"request":{"raw":"GET /128/15893/15893294.png HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2721\r\netag: \"35992b114c21dd3c8e062d2996cb9d01\"\r\nlast-modified: Wed, 14 May 2025 11:25:48 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1772216950186_35065110_735511202_31_1248_0_55_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"35992b114c21dd3c8e062d2996cb9d01","sha1":"0ceab7f6e2880b1a99d5a940d010603bbcfae1b1","sha256":"0948e00a594b2abf3c58b9bfb1112ebbb765171040162172658ddba2eb56cd75","sha512":"1bcf56ad5b8fda70e8378cf5f290a71c44789d37e0b11986b00e4eaededf0084ca1f0a24b69d28ae8a6e168cab51150f6e0d4b02c700533717ad21007b2ccef4","ssdeep":"","tlshash":"d6515c5272d82c3a03d47dac6faca538946505d744c7e803f1738d6eb72835cc36d405","first_seen":"2026-02-27T18:20:48.9658Z","last_seen":"2026-07-20T08:33:26.96777Z","times_seen":11,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":51,"dns":13,"connect":1,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.900Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/39.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/39.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59962\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:11:47 GMT\r\netag: \"ea3a-631e2dd64bac0\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mybCEcF0ekL1HdfYx8aXCvuAVs94IIfg4E3CQ5KQzO07cbv%2BAIbstw3XazzhELX%2BUdGstoD7fF%2Bd370W7wamZGYapto5cLhncwU68w%3D%3D\"}]}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030efce07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x465, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ab52a20ec23f60c697e41f92174fdf7","sha1":"073ce620d12d2569fff30b90f6596dce77a0b2c9","sha256":"362a97d4be9f24e387b5ebd7a7ba74fd63b356345e5dfabec7d18913daaa6787","sha512":"fc9c22f71080ff49f779ce839ba1d9f74f5a0cce957da6d02911e7eec755bd4783c111cbb6ba4c6f510afc8d4017934db7d7f5ac68c79815ce0aeb354f21751f","ssdeep":"1536:ISZVj0QcQQoR/bGZYA/PlzERJpmf4DsYXqdyfpNKHsaOkt/:/YYzGJlzE7YOsY6dyfbpol","tlshash":"3b4302e8d93ca9f50a9afb60783d525a715ff02015d8ac786f5c42c2cc0629db376b39","first_seen":"2026-02-27T18:20:48.968598Z","last_seen":"2026-03-25T20:36:37.988052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/components/auth/ipfy.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /components/auth/ipfy.js HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Dec 2025 08:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69411692-c82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxtbVhvLECLPlSbZ4Zi0gC6Ncg2EnUnmOgYm%2B6i94SIDv4pH3Arlz8ff3jvPSRu58oFxz5ZVYzbE1GYHvHVkcs1tubGjmhhEYViJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf028e2445dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55180ff80f60751ef370c33eea6fea07","sha1":"ff3e1c62009001e0505ab8cf455797facbfb9847","sha256":"748100143447e57f7877407233e91a2baa841f30231d7838bc346ab2db17ee2c","sha512":"489af5c4f0264269bf0adc6923cd33c4fbf0f3d2a9e2c4f57e173b2e0ed728d3bb380aee1e93611a790faafa7b865f6df6e24e0ab3c4538e680b7484b7467562","ssdeep":"","tlshash":"ee61dcaa38f72535025371b90aaf92457132a4077689cd997a5c82103f5423a9bf2fcc","first_seen":"2026-02-27T18:19:54.201015Z","last_seen":"2026-02-27T18:33:02.551136Z","times_seen":9,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/system/games/btn_star_off_2.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:11.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/system/games/btn_star_off_2.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1036\r\nlast-modified: Sun, 16 Nov 2025 03:34:06 GMT\r\nvary: Accept-Encoding\r\netag: \"6919462e-40c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLdma4c6WsYD%2BTfcbYX5aUi2HK3crAwngCLbzLM%2BmyChbY%2F0TstBs3E4FbDZDPxVQ6REcn6zVHN%2FXg4pOajqqTw6eeMe3oE%2FvXCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf0d683345dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f9b6a776dcb8e53a1e22c1c1a7db2b1e","sha1":"52638a0c4fef4928975943596e67228a2b068de9","sha256":"12f53b8b3a8f1b20e8e5ed3d3f5edfde34f5859d49d0055950828630f26d2695","sha512":"ecab7d9479debfd6e786e1296326066784b626ba9dc78678ba1cfec7d72a24e875c353f334c7262b99559dba8198286be93921f685fa2b8a2876bc42f34c9fad","ssdeep":"","tlshash":"7611509043a42922e86b03760dc9d6125b34aea2a3f374cad84077285a3d1fedb2de14","first_seen":"2024-08-16T09:56:55Z","last_seen":"2026-08-07T19:27:57.305919Z","times_seen":17494,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/banners-auth/banner_auth_20251229_093734_61aa62c6.png","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/banners-auth/banner_auth_20251229_093734_61aa62c6.png HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 29 Dec 2025 08:37:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69523dce-a4bff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gK12CE0N2XrYY2kbIj7uFmtL4dc1%2Fq1QO3vQOlY8TYcIA0rMwnLmx9o1gqooJA3FVwukhqcW30pWgQVSy3QhGiDt4chSKVOWgR0b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf11492845dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 420, 8-bit/color RGBA, non-interlaced","md5":"88fa37dda09c6831782cb25852409c05","sha1":"4d7b6bd3ce814f7db7d6f57a01e062fb3422facd","sha256":"bfd5d4bbba00665d565000ed791080b505463cf0b987fc37b6394b3db1ba94a9","sha512":"bd7fe587ae8b237ad65a59750501bf8787ee2868893291a31b32908c4fda4b688340cfe100696ebd15d019fedb826823edbfded7aea95b196ba3b7d0935231aa","ssdeep":"12288:pZgT48B3N8oo1jeBYrHegk+Q3Yn6i1dNPnHNYh4mfQ8kvmSe3xwp:pZgTTan1j1+gkqn6ihNYqr+VBwp","tlshash":"80e433d51f166771997fc605b08cd241e2709b38a3e7dd37880ae0e11a7d7ee0dac066","first_seen":"2026-02-27T18:19:54.181083Z","last_seen":"2026-02-27T18:33:02.57626Z","times_seen":6,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/api/system/user/ipfy_auth.php","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:13.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:13 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOXhrpa5QVG8HN5uhxGfrfIgpbYdqcOJPwMBthqYMIXT5h4QIS3a2gwBk1ySJf25YP2lnsfoSCQeHulKuQbDccgHvgJItiP9gxET\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf14499a45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bf10ac77a618-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":107,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.408Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bf123e99a618-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/79.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/79.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94090\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:12:14 GMT\r\netag: \"16f8a-631e2df00b780\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9z0ohk7qB%2FKOWnQwoCa%2B1Tx4nulqOIzzqfCzd7FIbHtagRKtnFyGC703YjLKjKiphtQOBiZpryUx%2FieQUCLJMi99uOD7sF%2Fcbt4lw%3D%3D\"}]}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030ef5e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x936, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f9b5d9f4a0a406e7dbf6da131b915ef","sha1":"baad588606635ba8083b98d667bc4651f8a606c9","sha256":"2f5663c432977c24ccc8fa380b8f62d2525f6702c3730e8b1f998e63ea184218","sha512":"ea7eaeb9a9764354640829b4e3e958bce1502ff98d69f99003c10f3663e93f57c02908af59815ea5e575cbfa25fd1f335ab0993eb21156ecbe9521e124b430a9","ssdeep":"1536:XXqiu8R8rbEB3L9m/UQoP5C9gEZkBZrvqJPU9Of3JMOPhKIn4FBjOLdU6BmXSsxi:Xbu8RmE19p7PAgDfrvaPU9w3DPjwBudR","tlshash":"839312569af3a98798ec89fbf5d0048be2162cccaba15c44271f54f6cde4cd3aa101d7","first_seen":"2026-02-27T18:20:48.97229Z","last_seen":"2026-02-27T18:33:02.568809Z","times_seen":4,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":33,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/bikini-paradise.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/bikini-paradise.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 15863\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3df7\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9IwUI7la9LnpvGtlbje3of0Z9kXMUwXN%2BGXarHyw7kNBw5Df%2FFi2Tukt1GtN2haBCqhSW5LaLJzLi%2B5oH3khyUoV%2FHGKyaYThJ%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2745dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15863,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e984864145908093ce9ad93d9db3cfd7","sha1":"ee600d4dfd069825db31fda111e9fcfb647bdbbb","sha256":"5d3d3478b22e86b9600568a8388455036cafe8a02fe1662d615409e549632fd1","sha512":"7aec9d40f44b623d11a4b3e0ffcc62704eddadd796afd54bb6c34790622b6b5240ec6f35a4612c87d4fb4b0334bd9ac2ee2711e224656c3cd4a9802ef27e92d2","ssdeep":"384:G4sPI5tNN/k3M5VeA18h56cW4A30s/iMY2aeZ6NkktFruF6qIW:GjPuR/kYCXh9E/tZaGkDrs","tlshash":"c162c06b97d564eaf9e7003838f6d532cb620402a2ede0495b7431f822237771984e7d","first_seen":"2025-08-01T05:40:50.55693Z","last_seen":"2026-07-22T04:41:56.523067Z","times_seen":31,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/wings.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/wings.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 15691\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3d4b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmRI1Zb9VdXDmoQefRv98ZynOjECfPVsMXjciE0KxyBc7rgHzSRoRPKBxxMR5IbhFqx9uhqLjqFFIYZRpLUxAl1mtea6bg4Pu9TA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2945dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15691,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"73c275a6843162bde31ef34367fb533f","sha1":"5b416173b837d6550dd95a0464362c1e647f0d39","sha256":"c530dd14e4aff20e7ba050c0713532b84a97e70e72975d3d7d0358c8b1d54baf","sha512":"31d18d5b22cbdeacc387b5b2e784678094db6e0c2524705f95686210ad35abbcbfc62727d4402f8cab434e46b2479436c9aa9add35d8ac1b4d0c547a0340c739","ssdeep":"384:W/Co32B8K6jfKjHjpf9HEfWtKzcQiM3BhPaaYKE+3f:+FfWjDk+t9QF3Bhi+P","tlshash":"b962d1de22712ff3cbe50e38e587ba5a3a71ac05c3c77651a2420c1335378918f61b49","first_seen":"2025-09-16T05:41:24.481526Z","last_seen":"2026-07-12T15:15:11.619454Z","times_seen":46,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.575.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@0.575.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d49bf051eca3181-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 713014\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 27 Feb 2027 18:29:10 GMT\r\nlast-modified: Thu, 19 Feb 2026 12:24:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8BVXy+/tHBRhbAuCI4PHS/I0wiLM9GmMiwC0nVADDiY=:\r\nfly-request-id: 01KHTXNVJSDP3DHKM4Y4CXBCZE-fra\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"7e93d3434587cb410db274e4f2d8976e","sha1":"4ad59c32e25887497f1819c8e42fa47e46421db7","sha256":"f01557cbefed1c14616c0b822383c74bf234c222ccf4698c8b00b49d50030e26","sha512":"4028a8993d7faab9ef09569c9af0956004c9815efaa2bfbf02401478f591c4959796e513ba0e1d8b9f11aae786688a63923f9e2c822e51424bbf655620ab9934","ssdeep":"3072:hcIl2IQWkHpsHqBKdxKuo681z3fsjHhmTPO4Ljbq5jUkm6WXrEHbiePVFtSAjpKN:2EQaH814m6EElPDoAAR5a2B","tlshash":"0d8463af8fcd269f4c56e7881a4bb0111fed93bd331a8c12768e963bc252416dcb3651","first_seen":"2026-02-19T12:32:30.318976Z","last_seen":"2026-06-28T05:45:16.370708Z","times_seen":716,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/cash-mania.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/cash-mania.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 26059\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-65cb\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYWCxMqC370oRS13n78ADMM71WWk%2FdICiZqtjBuJRHEh%2BcexOgNDvUu7bhKReZFuHWwlInxLbGy9goCa94aazBaPFE7Nn6qge%2BKg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae2c45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26059,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d9fed779bb7f5815eaf74a0f39783d8","sha1":"0a7e8550b519c69abcdba26ae35b149882c5793c","sha256":"142648ba603e8c3d927bded80fed2c3d900f1e9d259d5d78b22e6922def903f0","sha512":"a17006301eaf28b12e54290bb218e009c677cd13c342d991902762cb5da96ef1475aa027235da032d1f5b429a1c4de0a3ff1068df20137d8812446281b2f9369","ssdeep":"768:uNjT1Ixv3AsSpR7rY6HOB+wUwcBdmfQfXf1n:KNIxvQsaY4OBPUlr2Qfv1n","tlshash":"c1c2e03e2e965e38cdbc49b71d1b7935036bbc3d106e8427606498c3e13caf8d49ba95","first_seen":"2024-10-06T19:12:52.666187Z","last_seen":"2026-07-20T12:20:52.453423Z","times_seen":274,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/fortune-snake.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/fortune-snake.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: image/avif\r\ncontent-length: 21789\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-551d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdjzkjXM2bPDIkhcBQUphhQbzXO9Mdd%2FPC%2FLmbiC%2FKxeyejgoi3s95k07Z6CVQuCKYa1Gv%2Bpi7cEp3c83LfMxeBmJtYAcZRy8%2FU9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf11992e45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21789,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"65aa8076a8c5c0f75bf5cf3143a8a891","sha1":"474d7b2390c8b21625428d492818ce2b1076d645","sha256":"79b46fbcd2ca168ae4b12fb7dd0993a2f34d0ece25a0a7d4ca89fc3b3b85908c","sha512":"d1f21c872aeab40cdf0a49d37593ca0f9cfee794cafca5652257819ecb49a77777cc33cf2173c8eaf63411457f65bdb35e0b9baeea360f65db28038dd2f4cf61","ssdeep":"384:HRi4gqVjyomaHXSIINMDWXvkFeIwI+qAX3zhvx9atEml/RIEM6t5T2ZcEO:xi4plKaHCIS22keI9+qSzhZctEmoc2yf","tlshash":"4ca2f125d15df8bcdbcb8d39518f99a8020516b0cbee2745125a77bce7bb1ee0132760","first_seen":"2025-03-19T17:07:32.469642Z","last_seen":"2026-08-02T08:23:39.078081Z","times_seen":729,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/branding/20260210171342_5967e4ab6acf.png","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/branding/20260210171342_5967e4ab6acf.png HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 20:13:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698b9176-40af0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAa0Qb9kOOmH9i7L9t6u3SbVgKStUsoN9Mt7M87%2B0YTxn44AWm8UpexY2%2FzLhflsBHvfe7R4e4DnRCROQ3BryA4uCXh31D6AqsJ9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf028e2345dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 250, 8-bit/color RGBA, non-interlaced","md5":"d0cb1ad9456b841df310e1ee389c88ef","sha1":"2c912b458636e9f44d36594e6f7ad3fe5ca64dd3","sha256":"1c9af5c3d469aa4e154a6d6ed393b6e702dc9d79f249e3e0a83639fcec15eb8b","sha512":"e542bc7b2e61122daa7688a40ed3d84bc8285a7a627e918fda0f41635b4ffd2b27366d9a8e77652e50aefd3757a25e6b17c337ea9986c884be9c09c3cbab3bbf","ssdeep":"6144:l9TAPuXy/cRCThAnPIVSsRr4KbUOqD0qF4EDdmuP:TTA26tAPH2r4Kq0qFRJmuP","tlshash":"474422820b6362b24532469252dd477cd3135042ba85f2eb6ba186ffe5727c8f087fd6","first_seen":"2026-02-27T18:29:39.685359Z","last_seen":"2026-02-27T18:33:02.57704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/jackpots/jackpot_2.webp","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/jackpots/jackpot_2.webp HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76056\r\nlast-modified: Sun, 23 Nov 2025 05:46:00 GMT\r\nvary: Accept-Encoding\r\netag: \"69229f98-12918\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZHlEXzYbvF0YVsNanir0opk56YqLkbn8ulr8N6w8IBKmjx4Am5K753DTjZS3rpPlHdlZmy8vHtKzoz821vvrGAkN2lXrFf2i5Qp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf028e2545dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59577eff3ca9861663819578de01254f","sha1":"13f939565693b4a74ed0c12c2b314b6fb3d36258","sha256":"219867a1a6ef5169456e8a43f2d3b8d8eb24cbeb9d9dd4403740165caa60e070","sha512":"bbcfa34b133f8c0ebd6a4a1268f9eca7d13685a41a29cc38418e96ee9e1a572e42bd0de60cae137e7ac34d0ee7ab439bebf17db6f080eba8952ca92a381d9c53","ssdeep":"1536:2K1JJPpWJL/smGbDwMYHVnoGiGA4WACtwKnkBob+00kTuYjjvQtM:2654LXIDro4GzWjtRJ+6uYjjiM","tlshash":"af7312d570dbb9b9cf009ee0be878e270fce5855b448c4a7d2cd569f2b88d75848305a","first_seen":"2026-02-27T18:29:39.686126Z","last_seen":"2026-02-27T18:33:02.557131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/83.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/83.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 141032\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:12:26 GMT\r\netag: \"226e8-631e2dfb7d280\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7YaKuxHtDPAjrRs6O0EZGD0H2%2F1YOQx7%2FyEscsgBGRoQjLnFnl0rJTUEG5VE7aDL9bjqyaneprg240VFq7%2FfCT8Pe0pvNjmK6YqQQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9d49bf030ef2e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 772x1032, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"30ac5e292644172afe9e9f2dcc5fbe6a","sha1":"b952e64fad8bc60fdffd3ed08df6cd8b2c4ca5bf","sha256":"019e4c3b83abc4f50cdce07e4f7cda1395b742742d1ea2ffe4753dc112f80d30","sha512":"4b32278cba62fdcc76b1fd53a29d87b5d122889e84ebc00785dc738dc55d1efba2d3e1754a264a7af3e1a193e6c1526d188aa7aad66069e39248973a70555b1a","ssdeep":"3072:sZ/BSjzR+GNj2JK6FmZVf5H/5o34iWmJfZzS6OKQwcuL:sZp+zRl6K68rfS34iWwj/d","tlshash":"29d3127c53bf782014cca5e638daf46bb584a9e4083b112bb19b050f42f83bb5595e7e","first_seen":"2026-02-27T18:29:39.686974Z","last_seen":"2026-02-27T18:33:02.587614Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":48,"dns":5,"connect":15,"send":0,"wait":718,"receive":699,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/145.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/145.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30654\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:11:39 GMT\r\netag: \"77be-631e2dceaa8c0\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSS5KZ6CK0KijahDcVL00Gza1UGtjC2rt%2B8ID1LD3%2FBlUkA7nYLBa%2FeBC3FnT8AhGLQWRsfumNdy1%2F9G1ITfAHTOJXFwC8USka7ZuQ%3D%3D\"}]}\r\nage: 525\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030ef3e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x465, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18e826eea59ccb4e8a3928dcbeacd09d","sha1":"ac3b2458266c79c09f1a0f2836ec5c207abacf9c","sha256":"2a2d9892a6e3de2964db06a80c175f5674e026c3a676d83009d0b6e21da3c0df","sha512":"8a6c18ad5a0f8d8ff479b65b422ca0227b9b64353f16a0585a55fe09158ae55df4fd792d078c65c5c8ae28b5b5e4e9c30ff3dd7dc05227d8f4b84f474c535231","ssdeep":"768:jBuoEVQZt28RsQu4aBT22f1Ep08PEkksex6mrV73caSKUsyyK:9uv015krf1Ub7bex6MSV","tlshash":"dcd2e17bdc60f1d2a88792e80ef58304bb39634756ad201885be2375fb00b4f447539e","first_seen":"2026-02-27T18:20:48.967819Z","last_seen":"2026-02-27T18:33:02.559013Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":33,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/ganesha-gold.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/ganesha-gold.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 16220\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-3f5c\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5joOiwkgpmB4lTVfuluX8Xk3gH6%2B49UCmuvBbtQ36o%2B%2BLz9loUQ7llAIUduFPnkl3fH7vCZ5vYYCSpaV%2F3izjyUp2cBfXifogjj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae3145dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16220,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"42e5bcb0f76e21b6743e2050f4899d83","sha1":"93b5eba8e30d1ae699553e0035da5c343e070085","sha256":"c7e359923ba5672e26c8c8c7ea2fc5e8a9a57b58cb4a0c26ea8e636fbb30ec19","sha512":"d19a56bc762b6343fe9a2d85df8be009248f7f1191594d8bba49cf47a0354f09b65e078ddac9373661726578915def72da04693671b981ca1ef503fe711b2a05","ssdeep":"384:AfG0QSd+7bMOH061gVPrLL8EarfePSUjnQLrSV4Mi1BE9N0y5:AfGPbMpJrMEarf0arSV4Mi1M35","tlshash":"c572c099bca93df0c1baf7bae96382334640226d49c3117df880277919b4ef94019e75","first_seen":"2024-12-01T15:43:36.228242Z","last_seen":"2026-08-03T10:46:11.213959Z","times_seen":331,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/api/system/user/ipfy_auth.php","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"POST /api/system/user/ipfy_auth.php HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BF8ZSkMX3%2FDAoxpqu3CxXxCnronxznWSvaY4eP%2B90YLGLpDSM%2BIrk6EDqd4ih0gEHCDJXnLFZbaSZoHxNmkK1VFX9jHeCeylUxbg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf13296445dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4f8d2d353a86d3561152e9853e61d62d","sha1":"b189f07cdf4e0b8679adda4b3e3e4f0272dff697","sha256":"db6906aec18a6c3f3b337b0e31c157f45d944132bdc8deac1b9828ac52e6eef9","sha512":"19bb4e35dc93019d4b36ac5910f18249cd4ce36a3ad12f8e4b23d6e5c31a6174c16bc2e4727e188d72e672c120aea283b4e6e6dd276ed23829c7582668f2e33b","ssdeep":"","tlshash":"5e80002a080820a88cc0c080c200ba23c30a8238380830208008300822af0a80220c23","first_seen":"2026-02-27T18:19:54.154557Z","last_seen":"2026-02-27T18:33:02.57939Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/banners/banner_20260215_221222_d970cf9b.jpg","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/banners/banner_20260215_221222_d970cf9b.jpg HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Feb 2026 01:12:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69926ef6-2872f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqZf50Xzn%2Bwjn6eZyeTAlCK7E8wOlHgCo9lzm5Eo4LVDOH5hEz7us%2Bl7uTu6q%2BRtX%2FSkZc2yKW05hmKQjB7ZSNdwHnRMRBS5zqrX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf10389045dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"6a0f34c0b70fd53c0dc97c8fc0b78aed","sha1":"38ce2b88f5bb49921e9e2f84aa6ed786aaaf678e","sha256":"49890bce1ad5ed0b477d6bf6498f31f081857df03b820282407193108341c07a","sha512":"86bcdc6a8fc0a94acaa4cdaeed93ca6219fbb175f3defcaeb0fbb52c8f9fbc095e531df3ee9094419e91f7f2c25ce543a6df1e29b2e3b86cbfc38c31db0a3568","ssdeep":"3072:cTs1gq0h7vGHg9M/vl4v4KWLV3mbm0ALS5e4normkrX:cTOglvWg9mvl4gKBmqe4dk","tlshash":"35f312b379e6c358c5f942b044c6be48244b73ce763d0fd885f225ec2d8e959029adca","first_seen":"2026-02-27T18:29:39.688979Z","last_seen":"2026-02-27T18:33:02.566478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api64.ipify.org/?format=json","fqdn":"api64.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"173.231.16.77","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ipify.org","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Sun, 07 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"F7:FB:D7:A6:46:74:41:70:1B:A4:47:72:CE:46:DD:ED:B9:6E:58:0F","sha256":"65:A6:3B:17:C5:1E:19:D8:09:8A:AC:AB:C5:CE:0D:B2:4A:06:47:FE:31:29:AE:DF:7D:4F:A1:83:07:B8:E0:C8"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api64.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":357,"dns":4,"connect":136,"send":0,"wait":151,"receive":1,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/150.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/150.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37460\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:11:39 GMT\r\netag: \"9254-631e2dceaa8c0\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtzR8F4N0OTmbUd5b0Zkva6sw1cvUYq%2Bi9x7UKMwCfLHt9GDXegFEodIjfA2GC6CviNOw8q9Odp7Viha2j%2BqUkN4LRovfsf2pNeHSQ%3D%3D\"}]}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030ef7e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x465, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f36e0efd60f389efaa2a10b1639678b3","sha1":"a44de0d8c8f4f5dc32e927f693cd1518d43a3537","sha256":"11bdd38ee1fc425853dc6abb9fd79f191fd8faefded67ca203bf5a6dff2a9a9b","sha512":"2646dff8cef72d19fd70a705374ace3d30aa63c3a60cce9a909a2e1b58610f2c753fc0c51dc65b587e0635f8d38299784169d5969570b49189502371cefce52a","ssdeep":"768:4EGYeeD/94EJF9Y0feknYu2XXRyHwwfgEaEIALBx+B9Ag:4Eve+/9zn9Y4eMYu2XuNgtEXiB9Ag","tlshash":"c2f2f14cd2d67d2bc372e723351528d784d9e888a6f216b8e40f45b7362998e0976ccb","first_seen":"2026-02-27T18:20:48.957675Z","last_seen":"2026-02-27T18:33:02.588323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/31.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/31.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40636\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:11:45 GMT\r\netag: \"9ebc-631e2dd463640\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TcHNu2P4urcFe9rNj4dw8CSxi5izgOzN9ZoO8EnjtHG2RROL0PzkkfTZXRE1o2toqiRVEDJDgi8ipHe6v9KQ5GtFB2QWlzqEF9y0Og%3D%3D\"}]}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030efae07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 345x465, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17c3a89303825853356e6b85ad1cd966","sha1":"88ad64dc2f48f113fbf3fbfc3f6d7ae39af0d891","sha256":"0e048d113cc3244708f44c7259aca20ee60fc0666a295a286d539e0d08c38144","sha512":"e6e93171b821ad0c459ef409386e981c4de8514a6d18243d5ecf459f8f58e25be6b59f42789856f011a3b58ba39513c4538e1e986bcc920ca6c74b8aaecdab1e","ssdeep":"768:IHsfZ+sy/01CwIor4S0UHx+rH+BxeWXAmmXzacAi6GWjnVRkh/NuzXzx:IHo4ECwIoMFKHxe4AmirexrVmhNm1","tlshash":"d403f1fbeb101ba4e16cd62950d327b7213af6580b1834252a65fef212f89b11d4ce4a","first_seen":"2026-02-27T18:20:48.94361Z","last_seen":"2026-02-27T18:33:02.559779Z","times_seen":4,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":32,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/includes/ipfy.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /includes/ipfy.js HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 16 Dec 2025 08:06:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6941130e-916\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3TFB9F9%2Fwfk2A7dV4GY0BCml63TqEWvkldCLNkB%2FvgGNOskGDWA5%2F9k9lMipbUrslYBH87bfCfqNYGj3k51wGbvwa2wVkM%2FpnZa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf02be3645dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"abbacedb349c8e3cf5df807783039997","sha1":"9eb553ba32cf159c4e6141fa56ddf32c0f7e76d2","sha256":"f044218065aa71eecfddfdef69a1f039c3b2c32ce4e7ac1f2474d3810c6c72fa","sha512":"b1798206212b4cc55e321c961820a40ef889010d78a545eede9536bbee3a3c17d7c0cac252580642cd32debe6d4cad37da57cb4077cab8dec622d820eeebc75a","ssdeep":"","tlshash":"a941dae922f7606e0a63206c1bebc10b6727d40b3b89c5587e9c71022f8527987f1bc8","first_seen":"2026-02-27T18:19:54.208801Z","last_seen":"2026-02-27T18:33:02.58015Z","times_seen":9,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9d49bf02bfa20883-OSL\r\nlocation: /lucide@0.575.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":175,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/fortune-mouse.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/fortune-mouse.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10573\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-294d\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npMGLx6UYQl0uifE76Bt2W1hnT2%2B0%2BqniUC3O%2BCntYiVf2a7sbcBEzIvgrTNvk2gE%2B0VG9r9Ic%2B1KtwtfqobpJeaJTuj9q7VzyRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae2f45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10573,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"393f895552b6ca8b22a2caf87c10a2a5","sha1":"4f902d15382c5162746fac19865b23c5987599de","sha256":"1bb70dd7d4a5975463426b6dcaf884550ee61dde01fd552c934c9ebd0cc19361","sha512":"45e45416088775a6f728c5be51142b8096238d94408ced0be81884d59ef20447cd3fa8718ff37be74927d3ebe62e4e6d0b24d3340c8c51b01038919ee36d8cf7","ssdeep":"192:++E0unQNixIJ8CtDKsSQheJAnDn6HXFiV3XKmmHI4++FLM6oLtj9LEeVyQwwomcC:q0YQpywloAnb6H1iRiq+hmxj9LEkyQw8","tlshash":"dd22bf053a8c7cc6f4f94b3171ecb56b8b1848f02ad36e08ca1af1d984126d27a19b57","first_seen":"2024-08-22T23:03:43Z","last_seen":"2026-07-24T18:33:50.548721Z","times_seen":565,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::crrwr-1770516958843-e8a5a5e1e05a\r\nlast-modified: Sun, 08 Feb 2026 02:15:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1699991\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pSOtAhB7tjWdZZwAHYDl57sq6XHOcrthlobwUNxeBQm7f5Kc3wpaVip9%2BFPoYjXrgMNjNH2Zjwhdls6dCi1vcpAKjlH9J3RHvkOt1OyctH1tA%3D%3D\"}]}\r\ncf-ray: 9d49bf047c98902d-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-07T19:00:53.488036Z","times_seen":48376,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d49bf137855a618-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/branding/20260210171342_fddb31592980.png","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:13.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/branding/20260210171342_fddb31592980.png HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Feb 2026 20:13:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698b9176-1c113\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qLHA3Nh01qHb5T5GOnEKADIAYnuuXZm8EnYvPEivWKfHlySVNwdj3w%2FlJgTObjBKB4fzPhrNLH2vt%2FHsO0uFuYBunSMtLG%2BqpdG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf14499745dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 612 x 408, 8-bit/color RGBA, non-interlaced","md5":"84e0e6c06b12524d45d2acf48a081da5","sha1":"24a5806cc61bedeff19081f412ef79c7f1e6bbef","sha256":"4e54782c5fe2dbc267f9273bb53ef50a078310836e46e7f828cd4b0cc8306a97","sha512":"f6221ed001f54dd9977691aafc918f7fe3f05d7c24526c1afdd4a9b980b209e904ceeeadb5fc1ed811c0da0eebb69e563c0d2146971b08ad4973610ab8a3edce","ssdeep":"3072:jF5s0EOZhfbfl1Rv+JnH95Yd3zWx8OawB/:jF5pESJ1RmJnH95GjgJB/","tlshash":"5fb301337d356dfbcc6b80e8519bc0474d2946a89a413d2f979c86efc2829031eb791b","first_seen":"2026-02-27T18:29:39.692617Z","last_seen":"2026-02-27T18:33:02.573606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/jungle-delight.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/jungle-delight.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 13817\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-35f9\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWGmFibzyicXQipv0mDcAtA2pflL%2BpHH1c50ZVEuIA7TmCGewA2uWL4STVXqwD4ztSC5aA8gUCz%2Fyd1I1Q0PVi5XnkWHvPqAYIrp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2645dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13817,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c413b07bad8b2ec49281b2be91fdbfc","sha1":"5f77a369bfb2ac72ffa65cbea10230630a039f5e","sha256":"980241c4e85e0024df662c1588e10035bd147fd387dfa5cf74a4bb7fc311171b","sha512":"a8c58d76d1ba21f912e5bfdaee882508d414fdff3cb0ff1ffb9c231d3b08e57e6eff1bce33b758510958224aee215b7f1ab9512e5f2576c7fe013e62c7950d9a","ssdeep":"384:SHgaPnu5C1usSrTzfHakCMrMp1PrPf17/NTu+qDY6J:S7Pu5CWraMrMrrvTGE+","tlshash":"88529e002fc17c5fd4b960b84c404a5bfa91deb7802ad6cab8852b2c7b98f6d6cd4959","first_seen":"2025-03-21T08:06:36.412501Z","last_seen":"2026-07-08T09:40:58.603427Z","times_seen":210,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/double-fortune.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/double-fortune.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 20571\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-505b\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zgFR1XUBuJnVfCLC6ab8GRW8PnZQ%2FrEPwjhWQtClFp0ymjzL5%2BRlmYwx069bpgqSrc3a8fN3ANItiKL4VgJTF37NQ6CA8lrsWmO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf029e2a45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20571,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"986a1af67295f4b86aa86eee1758fe0b","sha1":"fb8de9d4876adf409e8b898619652ff1ad2db787","sha256":"f8df0b47a7d2191f70cb4c2c91f52170f8dfb77c1cd948bea7fed401173c242c","sha512":"3578bded4ed8e4324724fa98535b93b067b39ac0d0fd6da8f2a468f8839902fb993b660769dac607f2d7413ecc573985c384464e9dcd9d4528fc5fa78d9b80ac","ssdeep":"384:LKU0ZhLjyhjnMkkAWxlxJoRE2fMoqxvleVCfaHInWUHdX0kUk4O5oCNwd:ORnVAWnfp4VCfXWU9XOk1jq","tlshash":"8192e118b70c99fbe5f912700084a72cfc2ab7f5f663785649876bd1a93c1758880ad8","first_seen":"2024-12-01T15:43:36.246984Z","last_seen":"2026-07-07T22:56:51.942847Z","times_seen":265,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/uploads/igamewin/piggy-gold.avif","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /uploads/igamewin/piggy-gold.avif HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/avif\r\ncontent-length: 12702\r\nlast-modified: Fri, 19 Sep 2025 20:59:08 GMT\r\nvary: Accept-Encoding\r\netag: \"68cdc41c-319e\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQsdtTAU17VOXgj4%2BQaO1tUKagBJdKOY2lpu1wOM2dhg%2BZxbRY3KWQ2s66a1kOTG9VV5hAqw8a8PBG44soHwyv6xub9B5Yav3E5y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d49bf02ae2e45dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12702,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5c1af2366443302b1b67deca4866c5d4","sha1":"02e3a26e115266462e2800c698891fde9d9649f0","sha256":"d0087fea16072f172a53ad86c7fe3d312703eff5ab63588534606d63e378e4a5","sha512":"cac93cdf6bfaf3ab8b54d2ef437259ce4fb5ab8ca464aa5b9079967417b5bd68400d0eb939a068559f938af02ea079eaf75731d457bdf913694b2ee0ccd21327","ssdeep":"192:+C8vXF69lQaZaXkLhaGPjtANqjiWBZnk87XTl3M/yFtazRnZuvZdKjm6v0jeSvv6:q/uQaZaXujiNqjFk/Kazq4mxjeV","tlshash":"7642cf1e4f2eb892f49553f100b84d6f31f46825f4ebb5e068250736dd16f03cb8296a","first_seen":"2024-12-01T15:43:36.332718Z","last_seen":"2026-07-07T22:56:52.041533Z","times_seen":241,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api6.ipify.org/?format=json","fqdn":"api6.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.696Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api6.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 27 Feb 2026 19:17:10 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxowFxub%2B4XOiwMeBITQQdt1Upu%2F3Gaoc00fZ2cKHwdzf%2B%2FWTyDyPoG6GlF4ILUyq9jMrFmZxKWm46hhlaEY988sms3vha25bv9U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncf-ray: 9d49bf02be3545dd-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-07T19:24:38.971578Z","times_seen":416030,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::trvlc-1772216523118-7ea25bd501f3\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 426\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1hu1jCHbc4F7SOM6fCpDInXfsxcVxfzHrtCREv0S4r9aPz3g1RUnGrYXAS9Tn5jEjWlfXebRLm0xjdntebs8ZGNslhnjpYlZ2pxoKbVEy1Cyg%3D%3D\"}]}\r\ncf-ray: 9d49bf02f8f7902d-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T19:24:16.990693Z","times_seen":17766213,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":48,"dns":1,"connect":10,"send":0,"wait":13,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quadbet.fun/api/system/user/ipfy.php","fqdn":"quadbet.fun","domain":"quadbet.fun","tld":"fun"},"ip":{"addr":"172.67.166.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quadbet.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 02:14:01 GMT","end":"Mon, 11 May 2026 03:12:19 GMT"},"fingerprint":{"sha1":"FB:09:4E:06:CE:98:B1:B0:E8:35:3F:4F:39:D4:DC:2C:57:78:8E:ED","sha256":"6C:45:D5:F1:B8:48:FC:96:4A:C7:B2:80:4F:26:FB:A0:D8:0C:E9:EC:5D:9E:0D:8B:89:F7:8B:CC:07:5A:2B:64"}}},"request":{"raw":"POST /api/system/user/ipfy.php HTTP/1.1\r\nHost: quadbet.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://quadbet.fun/\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://quadbet.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=48aefd849bb3d90bf68a80b6e35bc24c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"ipv4\":\"91.90.42.154\",\"ipv6\":null}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Feb 2026 18:29:13 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OG7bGwa2gniC50u%2BlzI2aNzZID27oG8e8W5ri3OdGiPFGvNBC3gJ1SDMexMZauZaM5refRrBg9FbVhJGJjKLfKDAbDEhSr2Zoqne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d49bf14098945dd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2a52097d7f03606103253314c4ca024","sha1":"36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9","sha256":"38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53","sha512":"cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab","ssdeep":"","tlshash":"43600000000c0c0c00c000000300f300000300003c0c3000c000300033c300c0000c00","first_seen":"2023-04-10T00:36:02Z","last_seen":"2026-08-06T05:30:26.404482Z","times_seen":510,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"igamewin.com/storage/igamewin/331.webp","fqdn":"igamewin.com","domain":"igamewin.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:10.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"igamewin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 22:27:16 GMT","end":"Fri, 08 May 2026 23:26:03 GMT"},"fingerprint":{"sha1":"59:E4:2B:77:45:22:E1:42:60:D5:49:79:C5:BA:62:42:F8:88:87:5C","sha256":"EC:2C:DE:BE:39:E3:35:0A:65:33:45:8C:DE:D1:4C:E9:ED:28:27:6D:E4:00:69:11:00:48:6D:D4:35:F5:8E:38"}}},"request":{"raw":"GET /storage/igamewin/331.webp HTTP/1.1\r\nHost: igamewin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 18:29:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 164824\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Apr 2025 17:11:46 GMT\r\netag: \"283d8-631e2dd557880\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsmFhww6B%2F8fA%2BlwNBtEoj1vHFHYZRpwYCLOFkx6surd7UkbOkoZnwoP4wpmXDTPpv59%2B2SUc05wID15Fez%2FBBhYQGwLwvWkhQV7Cw%3D%3D\"}]}\r\nage: 528\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9d49bf030efbe07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 766x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4da3fa93ba8516f3b1ca29f4aa5f48e","sha1":"f46af157383b2c2959c67320f40a5a622db4f8b4","sha256":"990d9d861018fbf595f2e5c5854768f5ff9df6de1a37f41fe64d3b64ed5c9a0b","sha512":"735890277b5edbf461493aaa2da661ce8235edc0287fe86571464e15f0ace6a59cef90e9f3ae9daaa346eddfc11c414dc11b394a3927874962ee4f167192b83f","ssdeep":"3072:64BpXg5f6eO5cOhiX3/Tcgt2QbrsimibkwPX0BoaRdxgBgQen7QIZ:PXOPO5cHQgtHrXBP0vpn7QIZ","tlshash":"98f31371356ebc0bb1e7f783512753892754aeb1cf23a4308c18b1e7a562c544ba93be","first_seen":"2025-12-01T10:56:06.563969Z","last_seen":"2026-02-27T18:33:02.581391Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.utdstc.com/icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200","fqdn":"img.utdstc.com","domain":"utdstc.com","tld":"com"},"ip":{"addr":"151.101.131.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://quadbet.fun/","date":"2026-02-27T18:29:12.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.utdstc.com","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 12 Feb 2026 07:16:57 GMT","end":"Sat, 14 Mar 2026 07:16:56 GMT"},"fingerprint":{"sha1":"FD:0A:20:93:33:28:F3:F1:56:40:63:13:E6:D2:1B:A6:9F:B0:F2:E2","sha256":"A5:01:49:B7:04:6C:4C:D6:9A:AB:74:47:DB:5D:85:9B:A2:94:DB:DA:22:C1:50:18:FB:07:2A:74:D7:8F:91:8C"}}},"request":{"raw":"GET /icon/369/903/369903d1754537277dc661625a110396f6a799b7c07cb9e4dea3577c6ea78ee0:200 HTTP/1.1\r\nHost: img.utdstc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 26 Feb 2027 02:02:44 GMT\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=31536000\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\netag: \"69930db4-3bfe\"\r\nlast-modified: Mon, 16 Feb 2026 12:29:40 GMT\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\naccept-ranges: bytes\r\nage: 145588\r\ndate: Fri, 27 Feb 2026 18:29:12 GMT\r\nx-served-by: cache-hel1410029-HEL, cache-hel1410029-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 0\r\nx-timer: S1772216953.670231,VS0,VE1\r\nstrict-transport-security: max-age=300\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 15358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2cbe9777d07ceac68b8d1914b80695ad","sha1":"6027bf32845707a8c9cf776cfc535351f8aaaaaf","sha256":"23f83a5a29fc714f19136c4ed2c1b436450561ffec1eb253186bab604aeaf8c5","sha512":"4d7dfdaf5562f150055618886b9679f0628a97b12ef2e0be1393b134c002b20d4b6eca86f766e92c1efb505f73aa4fe2c8418d05cc4575df4fc09bf0c7f127c0","ssdeep":"384:inA0SYRtpX4A/0F+kD+0WK5nwcLtiYOroyaHNdK40:iAopX4A/0lDn5nwcLIpcyaHaB","tlshash":"e162d0866463ef06d36f43952cafc5e2e319de0c5272134ee2d78761582d43f8a5cb8a","first_seen":"2026-02-27T18:19:54.173564Z","last_seen":"2026-02-27T18:33:02.586907Z","times_seen":9,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":77,"dns":15,"connect":26,"send":0,"wait":28,"receive":3,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
