{"report_id":"bbdba562-692d-48f0-bebb-0aa03db9d599","version":6,"status":"done","tags":[],"date":"2026-04-15T05:39:08Z","url":{"schema":"https","addr":"bet-spindrift.club/","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"title":"Club 3000","dom":{"size":109929,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8a9ed38e28ca772e3c4af49cd897088b","sha1":"fd112896c7b588baedac617f5e7ef98c0e2a9f86","sha256":"20d462d203de21e88edf1fb3b38c3a5a845eac098bcc82e0fc39b33fd1e34543","sha512":"28bbe2602d55c240b8f1e97638418c7be073d9edfe359208f2d6dc3f9f49b25b7c6cdb355daf6362e648ab351ab088ee8ca9e21a5be7d5fa2bb28fc48dda55ed","ssdeep":"1536:AzpfUWdyumbivPzQtunkwOW9EL/727Ebdkh4nK9spSrvlgH:Of8nAvlgH","tlshash":"12b35730a8f254370153d0816f669b1b6ee0fa078a464305bbbd87e46fead8bed0755c","dom_hash":"domhasheaedd36c3b8202b5f9174f463e57c0bb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bet-spindrift.club/","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:39:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-04-08T12:59:36.316818Z","alert_count":0,"request_count":40,"received_data":1301551,"sent_data":18099,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"bet-spindrift.club","ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":28,"received_data":1497150,"sent_data":25908,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"betterlinks.pro","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-01T11:14:04.853343Z","last_seen":"2026-04-10T02:22:30.093063Z","alert_count":0,"request_count":2,"received_data":3194,"sent_data":1133,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bet-betflow.club","ip":{"addr":"104.21.69.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":31557,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/sendUpdateLead.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d53fda40818adbeaa6edc9d4a9a0aed4","sha1":"31b24c9416876b8b7f6cd28e48e503bc23325092","sha256":"919ce9b3424f34a538017fcc1b995e91ec808e1b5ee0a3ab495bc20ce328e8b6","sha512":"4992784b488ca29dfb48fb9f1e2c1cf84f58ad870470c4e6fdd4196fc84dfaf13c3e8b4e66398bd6221564c15cd69df41b6e6c42eea05ab6cefca081fe0b3f20","ssdeep":"","tlshash":"ff813f44a8a771ca65b320b99bdf010ab2b2406b1056d4447c0cbf44afe5a3f16befdd","size":4029,"data":"","first_seen":"2026-04-15T05:39:14.812388Z","last_seen":"2026-04-15T06:09:40.843737Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/prompt.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","size":453,"data":"","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-04-18T05:59:12.862993Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-22T22:09:25.775136Z","times_seen":623615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-22T22:12:46.893125Z","times_seen":212995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/jquery.min.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-04-22T21:57:18.236223Z","times_seen":23427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4056afbc46af4a8773d422d6fc054c9a","sha1":"5afbd4eda9fea3ea16a6b56351efc0008de3c2fe","sha256":"14050a64f1d558408b0f84b15ff430f96954e3e19c91b23c20fc10b9c33da3f1","sha512":"981903d9cc9d957e4f8e610f4c31e26659e604877faaf0134c5abf06a6c507823f7e0ac0da0955ab8124b49a00b1a6dd46a15baaf2578f428796a58940083b51","ssdeep":"","tlshash":"b401fe6d1895b4e633f92975d65b662d72ba0b103001d4049d65c0003c7dc6b1c16cce","size":679,"data":"","first_seen":"2026-04-15T05:39:14.837773Z","last_seen":"2026-04-15T06:09:40.881209Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/main-function.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6970cab15237bb526e29875a6e8593c6","sha1":"f1df1fd91f2e9477fad9e364b3f97179b24da0c7","sha256":"77b7f1a583ad9c81b922106510fb267c573613f8ab55226902a5836d2f69fd0d","sha512":"a26c959b7f7187be122a465d76d3369950103dea2294b463a2986294730b37ec858a8483580b8894eb58c68b7e8d0b955595864dfc6a4a004f44a3e5f04aebac","ssdeep":"3072:mzdYnb5Z7dDcMd97k0egNFiaFaGxtYmDQ/Qe2+5G:mzmb/7dDFd1/eg/iaFbsmEQF+5G","tlshash":"b524a52263c47d4112478f76bb1ff6f5ea2a5abcb4580c8fe1447d90e7ea905eae0530","size":225761,"data":"","first_seen":"2026-04-15T05:39:14.808871Z","last_seen":"2026-04-15T06:01:16.71577Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/firebase-prewarm.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbafb884324b60cd8489d5d5546c6175","sha1":"994ca74424072e21615f6994d542212059047903","sha256":"ec95ae1ec15462b4541bd4f757e355758936ddd6d86acf68254771ec4fde7e96","sha512":"00b442269d68b84a41774f26be81dd24d9e2f8b6bf188b88c71454c81234e0e1a19dd7bb6f0528adb7a856088b49bce702fe564a1d65d7ae78c71ddeb9f8be28","ssdeep":"","tlshash":"2d018e4b40aaf0b74e1170fcaccf6000b5be5402864fd568779ed2a59fa34a85217b4d","size":795,"data":"","first_seen":"2026-04-10T07:45:47.047027Z","last_seen":"2026-04-15T06:09:40.832648Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/translate.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","size":3637,"data":"","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-04-18T05:59:12.83921Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/uaParser.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-04-21T03:43:04.992151Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/84.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/84.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24856\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-6118\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:23\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e1042a11e3ee7caaef331003df85444e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24856,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"61fc1a4bc4147d355e9e78daf99e7177","sha1":"c85ac0d35571d9573875f1ad8a272c1f7bd1ae7f","sha256":"057a8a0191c6f886430116b6d9331d6cfbe42eabb818c1c3fb7f3bcbd4acbea2","sha512":"1f32ccb8dc91fb294b073f20634556494409440657988ab760b1b806052711d34614314e4a66ea1311d421b66a6c159e31e7622e73da05dc64e79e62dacb1786","ssdeep":"768:sm+zR7lbrymbQmflBLi3Upt/1KpNxvhLaNl:E7lbryI3i3OgNlh2Nl","tlshash":"57b2e125eeeb3b9acc27792b233fd6e577c36647f6a40c435518e7d6813b0a27110944","first_seen":"2025-08-04T05:48:20.985813Z","last_seen":"2026-04-15T06:07:56.891678Z","times_seen":17,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":73,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/23.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/23.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26442\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-674a\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/29/2025 22:59:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 44613790170922808412cb9b1b15ed91\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"869fd23387bbda94ddf6e782e64e532b","sha1":"27d74d36bfead1473a6a0a132c564a537ce17b32","sha256":"64af389f2904f5cca0b7fcb2b6bf02519c92ee963b9340dee0bbad2973296866","sha512":"2f599cb97d1c516bef58bcd7c6cac7287ca30cd35759ea181ac2d45a8691cfe18cbee4067ccbdd08de99e93c3872ca27f96cc187789ac09ac798c05abc26cdf5","ssdeep":"768:mXKBYJBaV7i0Bra9RAk5lvKayFlB0PTtcInEi+:KKBYeu0BrajT5lSayFlmPupN","tlshash":"87c2e1e14815c95fd17a2f7a68a6130d66a12a5816f4dac8fe1910fe037beea25e00c9","first_seen":"2025-07-04T00:17:04.66063Z","last_seen":"2026-04-15T12:46:53.808654Z","times_seen":12,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":337,"dns":1,"connect":18,"send":0,"wait":66,"receive":25,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/31.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/31.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27662\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-6c0e\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/26/2026 21:07:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 08f0ce7ef5e08503a700ce392bab54a3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27662,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"b35a9e11aadb3940f8bd05cd8dfdceb6","sha1":"c19414c0644ad31218716bf73fa2b14276da8e50","sha256":"8089c23f9f3b23973eb2f6f1a3ace1a8fda83788b8b4bf67be687bcd7692d00a","sha512":"67fac0fb942e2859da71291801d0a52ffcc8cee4f0172f8b70d683a71d24eea7a1a7625fbc27997bd419e3617a7d53b72cd1f63c7ffd3e4812560af0fd4aea30","ssdeep":"768:q3Q7oBFVZCNHFHK/qk3u+djDVUE+bYEdwK:P9NlHOqwHVUE+UEdwK","tlshash":"c9c2e0bbfeb67d30f709927daee45845f56c0040e99409362ad16be0b4fcc81bb17499","first_seen":"2026-03-15T02:44:29.414634Z","last_seen":"2026-04-15T06:01:16.677397Z","times_seen":7,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":76,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:38:46.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 15 Apr 2026 05:38:46 GMT\r\ncontent-length: 0\r\nlocation: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GTjSr5GZdcDwG9di%2FS1mPpRGD%2BCxwekwJNxBuiChJ4rtXPBKZJWMv2oMc76KRw70nfmXNBtRMRZL%2BHPBCSQLXCCR9oFt%2BywN24wTVHQyfiJqCdDkoUW9Xqyt5LK7P6VqtTw83w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ec89b225eb5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110104,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T23:09:24.873355Z","times_seen":14078528,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":51,"dns":41,"connect":1,"send":0,"wait":130,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_star_black.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_star_black.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67ae0046-fc\"\r\nlast-modified: Thu, 13 Feb 2025 14:23:02 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0743554895dcbac73df1b8b130db5039\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-04-18T06:01:45.920907Z","times_seen":118,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":358,"dns":1,"connect":18,"send":0,"wait":18,"receive":0,"ssl":396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/83.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/83.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11619\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-2d63\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f14c7c4cf11a02f3d0e8752bf777452a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 177x265, components 3","md5":"edd70e5552dc2e2b70471947421116b6","sha1":"754c59c80052d961759a4dbde472e06357b2300a","sha256":"c94278821241d76b58ca081241fe0550026e5ea41ab0d0368d948d0bb1be8431","sha512":"54454848f94e01f2e12447b2eb607526c0f9c1d4108bb04acdddd0ee67c2b5d52c23af122d57debca5122372e05afc1330583dc75c88ef5c8bca917d9ddc8102","ssdeep":"192:IUdeHU8j9fLxMZxVcDCAE2R8WBZxV+KiRCCm+Zk8xGoFxjImPjdtvm725Z:VeHdjI/AtR889+KECCm+ZRjImPymZ","tlshash":"a732bfe5091c43e1c6ee0968cd2abe3be14c6d4f7a816e36532520dd4f1ae136c627f9","first_seen":"2025-10-13T17:06:19.638326Z","last_seen":"2026-04-18T06:01:45.899141Z","times_seen":11,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bc81751c7d092ba553d3dc26fad58ec0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-04-18T06:01:45.893584Z","times_seen":149,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":384,"dns":2,"connect":17,"send":0,"wait":55,"receive":11,"ssl":420},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-1.webp","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-1.webp HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 574\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268afa5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-23e\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qiR9pG0hFYL3qmrZQGkV7R6%2BlqdQf0hJIJY4lSlO7VhEuIyjey6dAr%2BKtWLl%2F3F4WuQY0p2ghKTSPOqtucidgIBOtrh6QfqaDVc%2BHfJ4iKGd88jWLg9UdJS5dWg0%2FHb4Z%2FvUmQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16735dee72b009f6085c85bf194c313b","sha1":"0f7409a79c4926442e1ed59d10dbb87f290ea0a5","sha256":"3244abdb32f757760de0676e5a5c71e45558014437b3e3f437efd110a722dd22","sha512":"d280b78c80f8541ca9617dd50969109b38c2488f125dab50b5fd5bcfe5329fbb7fe28f7f09cdd52df7deb65c1f147f2b071beab7ce23bfc39104121c142bd606","ssdeep":"","tlshash":"eff041cbdb8e2ee4238b68600da0191601af340281000a840e04682367a03f8b9dc497","first_seen":"2024-10-04T10:42:22.386228Z","last_seen":"2026-04-18T05:59:12.843977Z","times_seen":124,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/87.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/87.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-2d4c\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:29:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c91855c0c7f8b54cfd5f427492c4d54d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11596,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x266, components 3","md5":"15b8bb38d014d9b89737bf48a9ec572a","sha1":"b91221c6b74cbb8bc4a0a5953ffbb1a657395b10","sha256":"7c16527e141bda396745917d324a2f3d253b2ca4da761978ec5aaacbee83349d","sha512":"de13c262b71c5c61c829630d221424dc6347fd5d1b0ce548a13909e97a435e7d8f5c08ca3289036c60da771754d9b8834d0a40b6730f9b919870effeac626c5f","ssdeep":"192:EjhluL+0OMhhLPEWeWOx2hTk3KPMt/Pty3TwCkdGH7zVQwiC8:EmBFhha1OslATw9kn1iC8","tlshash":"2b32afc36e016477baac78720bba42d7534b14d43464f6d4f64364f27a5cf09b54b80b","first_seen":"2025-10-16T14:08:19.455473Z","last_seen":"2026-04-15T06:01:16.731101Z","times_seen":11,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":309,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/firebase-prewarm.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/firebase-prewarm.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsfluUU0N3ShLlIiPaLW4m3Px46fXzpcXBYpHcamGk5QYZyBuh7amPzqkOZyeXDUSluomu90y3Ecr2oJiOpzzJw5qxLcQzHwouEYtrB7KlQZCbbuxK%2BIIin35lD%2BHehHo%2BhA6y4%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-31b\"\r\ncf-ray: 9ec89b266aef5690-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (305)","md5":"cbafb884324b60cd8489d5d5546c6175","sha1":"994ca74424072e21615f6994d542212059047903","sha256":"ec95ae1ec15462b4541bd4f757e355758936ddd6d86acf68254771ec4fde7e96","sha512":"00b442269d68b84a41774f26be81dd24d9e2f8b6bf188b88c71454c81234e0e1a19dd7bb6f0528adb7a856088b49bce702fe564a1d65d7ae78c71ddeb9f8be28","ssdeep":"","tlshash":"2d018e4b40aaf0b74e1170fcaccf6000b5be5402864fd568779ed2a59fa34a85217b4d","first_seen":"2026-04-10T07:45:47.047027Z","last_seen":"2026-04-15T06:09:40.832648Z","times_seen":41,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_1.webp?options=content","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_1.webp?options=content HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26656\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268af55690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-6820\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB4pKxXOAp1UbcEygPYGRLh1jo8Pa4oqAHlESvQb6ZChYW2KZxKPVmVhLKnSPJaa4aP40ziJz%2FbhN2cBqXlN88HBazkK48uyqpqJPB3ulLvz27CqA0kiA1fQ0bz77IWWxk%2FdgBc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4073f01dd8814714f7ab5d94ca3901b2","sha1":"ca47eda632e810ac0bbf3958baae9d5e9849a521","sha256":"f6a7cb44ff9fffec48a88372c30e510210196d6b62c22bbea6ff421936ddd251","sha512":"18ddcf734520cb80dd8e24eb745e6c6af3793a2c666b7b747c544bb16f135cfd91d953588a9e66ea708bae148f2c5d14e1e83967880ee78d21433038806d7f48","ssdeep":"768:7wz/17GNQs3Mw/BlUUlyKQQjyfuvU9jT1e8f7m01M7Aoe:7wgf/FlyKQQWfuv4rfHq7/e","tlshash":"11c2e1cea187945ce253d6f89e995103b0ed48cba5c3e7344b54e74213aedebb0e4036","first_seen":"2026-04-15T05:39:14.790043Z","last_seen":"2026-04-15T06:01:16.728394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-3.webp","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-3.webp HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268af85690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-c8\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xO7OzkGRZ8Vi71N%2Fp0I%2FW0bIsyaR2Dio7vk21xQtcqUGCz4%2B716cxx9JjBhYzCSFkMp1tiGFaF5XKbF6K01YvvY%2BrkNXX%2BG6QlEuEQGdfJnjSwGrxF1UtQlKRU973HZ7A%2BxV9UY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-04-22T12:34:52.460339Z","times_seen":897,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/11.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/11.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8643\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-21c3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/05/2025 23:29:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c583bf80a73a105d5b12b1747e01d3d0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 205x256, components 3","md5":"9ff36fbd9924212dc79c2ef1c1d0d9b5","sha1":"db5b19b9defc0a6daae3c8c3a6dcafcc7368d843","sha256":"73c4e4f0785cd77a149b0d6faffc665874e7dcba07dcf51712ddad38e587839a","sha512":"d85d4b917630592760d3e4201c181a086d33f0ad79269cc43825ba2b69f9eff0b2c473942e4f47424a155bf0f4509cd356e36839c03acf7dcbbfb39b26b3270c","ssdeep":"192:CZHV7YyQ8bxJzHHYtsnwTPCees5zcQfqA5A+6wU/Vx9wFgUXx1OoV:CBVsMngzeItfqASwUX81OoV","tlshash":"0502af4ca34ba65ece395f343ade252b63045dbbeba05c642c7d49e9ec04f81096095e","first_seen":"2025-08-04T09:14:47.40239Z","last_seen":"2026-04-15T06:07:29.751053Z","times_seen":22,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":76,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/book_of_ra.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/book_of_ra.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 179446\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2bcf6\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/09/2026 11:39:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 24115def2b4fdd426a7fb127145d0f3d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":179446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5e34752edfa8ff55bbf5c2e2f1048612","sha1":"565eedd24fadc3d873dd2cc065637e86704b6812","sha256":"12f896383679cbdd332b993d3083ca9d5e83d1c73afa27fd1ecbcb20ad519ed4","sha512":"ea8dd42f9ce35f3cf4106f40c8b55e1660fca267bad3bd919da6380036fc4eb7b37a06411182f74859d71f555dfda3a13c23f1047d73446be97f21878e1a60d6","ssdeep":"3072:yjpqBXZh/6ctuEdYdXcK5khjHedHEftp7NTsDlvNFMLJvt282QeBko6:KpgT/XtzKM+RMpRTsDx7m+82Qeux","tlshash":"3004238302189ac896a33f519e89c17ff755f272474bb40323ae596e64bdd93c83762c","first_seen":"2025-08-04T09:14:47.411763Z","last_seen":"2026-04-18T06:01:45.90218Z","times_seen":47,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":60,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/59.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/59.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6665\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-1a09\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8e758d74f340a5567e796f14bbbf4eab\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 125x188, components 3","md5":"bccb418a6fc92738707f7e72bea9d347","sha1":"8269a453629f5efe77861c806bfcec086cae360e","sha256":"a15783adab8846eed8d0728cc8a4fb0f6587c507bfab786502db22a15fae931a","sha512":"3da92fcc7e9a67feafacc139d9544e1ce5d8f9809984d2650fb8ba0108d45f0ed058dd9baa23057d276cc951bb4898eea38701d2451b15359027c56a886dd91f","ssdeep":"192:QrL+BsowHgH810oukqeDJW7L0eXjaETZr75e+G:EqBjwHgcm7RzN3A+G","tlshash":"31d19d18973254559fbc2e71fd9d2de2dac876920c0cca1a101c31e928f02e79cb70a5","first_seen":"2025-08-03T23:29:43.500298Z","last_seen":"2026-04-15T09:37:41.478874Z","times_seen":23,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":83,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/48.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/48.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18960\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-4a10\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/25/2025 08:55:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 399006cd74c36d051cfb8427ad2c9873\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 230x345, components 3","md5":"2014c3327f37687612ab8af6da35f7b8","sha1":"04de51028966d327f2341b72beb35ce241cf58a6","sha256":"2f49ab60fee41487d63e3b453299735a0bdd6437671bdc482666d1d88e7155aa","sha512":"207d5f0ea3c6deb95e402139ff2c1c243d74ee0600bb4b1dca233c1cd3500e9c56b7141ddcd60a21091f93bf2be0caf9aa2fafff174ff0a808d50b4ee26a7153","ssdeep":"384:Hp4fl9b3tGGoPenjC6Zkd29RHIUvKUy1nEXHhibX9af6Lo1uNxPXnC:Hp63tG10TkyO2y1EXHKta3GPXC","tlshash":"6182d08337551631c938a464bbacb6c3fd17b80ca6bd5d7c0a9762e0a1b31da856f508","first_seen":"2025-07-04T00:17:04.623831Z","last_seen":"2026-04-15T06:08:03.117429Z","times_seen":21,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":72,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/f4fd7ae5-7373-4beb-bb27-b8a8bce31153/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:48.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"POST /api/leads/link/f4fd7ae5-7373-4beb-bb27-b8a8bce31153/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bet-spindrift.club/\r\nContent-Type: application/json\r\nContent-Length: 154\r\nOrigin: https://bet-spindrift.club\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":154,"data":"{\"events\":[{\"name\":\"full_page_loaded\",\"datetime\":\"2026-04-15T05:38:47.804Z\"},{\"name\":\"update_lead\",\"datetime\":\"2026-04-15T05:38:47.804Z\",\"is_bot\":false}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:48 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-iplb-request-id: A29EDE63:2927_3626401C:0050_69DF2468_E27C7E:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLvQ1x6FQeG6hKTy%2BEm5EkR9jpvc1XGHAyEcTRnuVVjD4UsdfPpsynubafWHZKUOxPk7n%2FMIPXayIju3mooIbEerQwijKxlADKmJJvkJfDall%2BpYIJUFl9m3hCN42CBiuJE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec89b2acf2656c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5b06237df75057025bfc9e8e7f795203","sha1":"4f0131556d3ba0a7794d5988e0dd2618a9bc37be","sha256":"2422334e0c3d364e748474ca8332e393b1113249f73229bef31358136aea636a","sha512":"208d05a3d3458a488d11b829c6dc875c9810729624c827d3174fcbfb70b1c01b4a09ef7cd0ea79a853d2c13f3c7935611d2ea1ed1faf1fda935a8b86faadd795","ssdeep":"","tlshash":"ed2153074855ecf15edadb52cb5abc091dfc496b90831864c1b4af245cdc6f6238a963","first_seen":"2026-04-15T05:39:14.794689Z","last_seen":"2026-04-15T06:01:16.726827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/big_bass.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/big_bass.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-14654\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 04:22:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ff1f1ffe00a3a536edc9a4973b71ab6b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":83540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160f3df3444691f8d4cd64548c1a55e6","sha1":"5960b875a1456af18f4c22ef7eacf000b3459313","sha256":"10231a4d0dcc5ce61b743462f20bf3c8c6fb2b5bd5394b73ae6ed9495569a1c4","sha512":"ec66b704fb3614e37c22e69a37c875d495e9e2881938cea12b6d382ca1e6b6ea44218547a59148b5d776a7c8fb56a8e2855cbb940ca49a59d74402f2156dca78","ssdeep":"1536:OeAPFjM+H5DW/a01AZVhy5ZyiCidhXZaO12vvDI2tvi92WfHbj5me/vmoTajG:OrPFjMrA45E+d9lADI2piIuHbgcNKG","tlshash":"778302ec175e8798c2a20ff4c9c201d3f68277558663d1293f9f512a00dd799ea3e3a9","first_seen":"2025-03-26T16:41:42.411759Z","last_seen":"2026-04-15T12:46:53.785204Z","times_seen":43,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":18,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_arrow.svg","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_arrow.svg HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFAq2AognmoqY%2FPAzSuaogSlsKOeA9i1SSRFsY61uQTGQS4r3oWy%2F1nQKfProz8p8w%2BuZ1I%2F97aRBz6hTFuZvq721UnZDFK1rdzth5Sg9enf%2BkjH%2FNzyx6TYqrsTyqjvqA1lIzY%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69dcd476-db\"\r\ncf-ray: 9ec89b266af15690-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-04-21T03:43:05.018973Z","times_seen":189,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_2.webp?options=content","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_2.webp?options=content HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 57680\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268af65690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-e150\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6A3YjPnKFVdItIEhr%2B3hxleyDJjG2EH%2Bxs3Zf%2BW8SOmXXyhcstBjdK5ENvyf2mcNfTSyUjvmnoMKSYHl6ahKumkYtk%2BVpvCGwufbf5BLImMvVv%2F28%2FflQgAvguvIhEzoPuLR64%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a646ab45dd742c982a19fd6cf90026e5","sha1":"bf761175b7c51055677cb436efa4a2f0036c5445","sha256":"e65d7d39f423665041bbb69beec0ef7addf21e68b1495463cd2bb220fe9b0bba","sha512":"6755f3ad10598d313b37f64ce892c605c390ecc88028a085c3c95706e9a8da09e91a946f12434793487eeca3ca6118811449328fdf7b1ff3dcadde1bd0c1c539","ssdeep":"1536:t7Xtvy+eyal8QSWceBfRdie4WMfQX6rxHMDbB:t7XtvRal8QSWceJ0WMYqg","tlshash":"e44302c6bd522110895dc2f64f1c9ce6c59e8285128843a326e7c63f295e3397eb9ef0","first_seen":"2026-04-15T05:39:14.796587Z","last_seen":"2026-04-15T06:01:16.679067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/zeus.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/zeus.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136852\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-21694\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/10/2026 05:55:43\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 62e5d980401f11e6724564741cb452b2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":136852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea40266545caa22557c38d644075dd6f","sha1":"15c73b4fd8ec8182caa19db4361fedb248ed37d0","sha256":"149221b0e9dbfc51a1c26bce5cc7938ba8aba81f45edf42d2457a111d6b1e07f","sha512":"4333ac13d48c21a5d2032de6b63ee13795db53efb38f5aa79e148d8a687a22cb833a1ea3ea9c79cd91604794e9ef433193c548886dd8ee417410c751e5317a52","ssdeep":"3072:hHfIdAMQuTI0wjLlm/eg0hC3IZy9CY5nuyhfXjOpEtfM:BfIdAMn6ueBaIZy9/uaPapE9M","tlshash":"39d31242e102d104e791b1b348c88f27a1fb75393c1316ea1f7a4ade45f7b8a6a5f1d4","first_seen":"2025-08-04T09:14:47.347312Z","last_seen":"2026-04-15T06:07:56.878383Z","times_seen":38,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":75,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/57.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/57.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9439\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0467-24df\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:27 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fd4d60e89532583852dd042c71fcbea1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9439,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3","md5":"048904a7201e06f5368327418e5ca5e2","sha1":"d6762683d9d2ace57a999398039970f49d58f86a","sha256":"d2cecb9a9be1d6f3f952cfa06c63413be2a2542c33a761759564d6c691f7ee09","sha512":"ab732939306a66ae80904b69168146abacde3da75588af6250ae4291d81b3e1deeb23bce9281190301929d5c737cd8de4f1670440060d26da38d213ecc8ae44d","ssdeep":"192:Uw0n+0CDG/NOGmRyEG1OEMU/oPxotAe0D4ROYCuW57xyRD6/IrgS1owKZtolHMq:UNBy9GmwFTMUAPKtA/+hCug7xyYWowGY","tlshash":"3a12b0ca28ace445f4a94ffc92a9a115dcb9dc313e67b98338925ce4d410d43cf31382","first_seen":"2025-10-03T17:42:24.249823Z","last_seen":"2026-04-15T09:30:34.278587Z","times_seen":18,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":84,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/1.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/1.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17522\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-4472\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eed69cd8f066218b304e26098a13862b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17522,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"db1cc279c3b846a5c642af5ab6d10428","sha1":"dee3397bef8ea01faa28b7049a43263c11363c74","sha256":"c6519f1fd251667b0096790a0ab678ad183842700cd62f691c8bec48172cd806","sha512":"ff5e33ed2f64f0add1f2e33c40f47049fbea45cb3be2583ae1d928c9e9d46bafce633e2039264a03fa981de4db701445a7f7169d7e9c591cea8066e2000994f4","ssdeep":"384:nsRQZaJbExGUr3GcC6m5MW0OiI+r4u8Mg7OZ4/5WM2RPIN7sW1u4RIBmpjcOZnO:n9glUr3Gkm5MyinrRk7Oy42N7squ4p8","tlshash":"e572cf5ccacad845d9c439781a07d6944addcfa3a4ea81bcca2ef1d234972fd9141e70","first_seen":"2025-09-19T05:20:47.32096Z","last_seen":"2026-04-15T06:08:03.14533Z","times_seen":17,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":70,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/icon.webp?options=content","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/icon.webp?options=content HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 30720\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b267af45690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-7800\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7VlIwXqeRTMf1%2FHt2Y5Y21QlkVEMQvX%2FaoMLTgLBGeWmjagE57MrRP%2Bjx4jwwvFzyaRbk2IkobVECqnOoH5SDiPh80TT4VlCnIvvZSZ02F6Eo2wY4jEHE%2BRzMdKcG%2BSMAvn88E%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"488565d29141c3635ec058e506086733","sha1":"d0adf830c1e00f51ebe7a9509cca91f222111815","sha256":"a826447b4ef938ea497cb425b5f5b0920221ed733b49d95b800743994a1886f9","sha512":"cc1d664b1016817031b1af3869ce069fc373c1e53a2146f15162b0caa951f3a6c2e3b13e3d686b6c7a8520e63acb1e20c8593bcc5ac7f9b16ff32e99f66574c3","ssdeep":"768:Cv5oeQhF6+iH6LVTF6eGGRY9+NNAuCtQ/dMbu9jJElF/:NhF6BaLRGkYQD0tQ/dMm6lF/","tlshash":"24d2e1c7bf751f801184eaec87d0821762dc9df94d5dfd0943a88bd0ae2be6591e152c","first_seen":"2026-04-15T05:39:14.800513Z","last_seen":"2026-04-15T06:01:16.675204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/joker.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/joker.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-188bc\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/22/2026 21:13:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 10d0e4c7bd8605f84521ce2142983e7d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":100540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5db3b114e4ef7291b41f9b7844698123","sha1":"82abd882c3f81f04064c7efc5567cee09bd930c6","sha256":"2565f22d64f5ee93da486cbacb48a6c9bc1d84c08e9033082564e92391fddb1b","sha512":"dc04e76a3227c1979955dab9790a35733d2b6cf1fd4dbd5a1f0b069819a45f2897fd1ff50ada5a81ac190a2930ba3606e712d5d19321a6971e80e1b31844abd1","ssdeep":"3072:0XqsEOUO4mzB/9A1UdpzV3Azqf600doYYS5ZGdt:0XVEOAmzd99R3Ahx6t","tlshash":"2fa312d10922c10bcb1db277e7d46b8b77323a550eed5ac14ad1e19867dd6ae2116308","first_seen":"2025-07-04T00:17:04.650617Z","last_seen":"2026-04-15T12:46:53.803962Z","times_seen":34,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":76,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-betflow.club/c68f028d-b651-4c83-a969-374fd53e415e/en/icon.webp?options=content","fqdn":"bet-betflow.club","domain":"bet-betflow.club","tld":"club"},"ip":{"addr":"104.21.69.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-betflow.club","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 15:21:14 GMT","end":"Thu, 09 Jul 2026 15:21:13 GMT"},"fingerprint":{"sha1":"3B:22:74:1F:76:1E:DF:9B:5D:38:F9:EF:E7:E2:2C:D2:69:37:9D:86","sha256":"DE:CF:AA:72:12:27:7B:92:AC:93:EA:AC:37:39:C4:8D:AB:9A:06:57:FF:F3:F8:9C:21:35:99:87:C0:7D:DA:13"}}},"request":{"raw":"GET /c68f028d-b651-4c83-a969-374fd53e415e/en/icon.webp?options=content HTTP/1.1\r\nHost: bet-betflow.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30720\r\ncf-ray: 9ec89b293eef712b-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69da4bff-7800\"\r\nlast-modified: Sat, 11 Apr 2026 13:26:23 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFqfg%2B18WD%2BhjpK4UH6WgeTkOuhk0fYMeHMF6gShj0dUGA6doBdK9eYB6PxUbhbQnig3xnW%2BGMwkWmwaGQveTDgLyCmRWUj%2BaDr8yF0Axl5ip3bE4jBzJrntPd5UW6bFBAly\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"488565d29141c3635ec058e506086733","sha1":"d0adf830c1e00f51ebe7a9509cca91f222111815","sha256":"a826447b4ef938ea497cb425b5f5b0920221ed733b49d95b800743994a1886f9","sha512":"cc1d664b1016817031b1af3869ce069fc373c1e53a2146f15162b0caa951f3a6c2e3b13e3d686b6c7a8520e63acb1e20c8593bcc5ac7f9b16ff32e99f66574c3","ssdeep":"768:Cv5oeQhF6+iH6LVTF6eGGRY9+NNAuCtQ/dMbu9jJElF/:NhF6BaLRGkYQD0tQ/dMm6lF/","tlshash":"24d2e1c7bf751f801184eaec87d0821762dc9df94d5dfd0943a88bd0ae2be6591e152c","first_seen":"2026-04-15T05:39:14.800513Z","last_seen":"2026-04-15T06:01:16.675204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1609,"timings":{"blocked":322,"dns":20,"connect":2,"send":0,"wait":873,"receive":2,"ssl":385},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/sweet_bonanza.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/sweet_bonanza.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88304\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-158f0\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/09/2026 12:11:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7b9ef1658b10a343e1823d8006333f52\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":88304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"869cd3c56bf90dff1800f9d15c570331","sha1":"a2ded4502224f3f51b010ff8f9d4768e9d536afa","sha256":"7befff9e0259bba05ae796e2bc198bd44a534f563365c20935b6c39339399dde","sha512":"764998cee89bcf28d5187684603ad4081448772336af2291a71e2ac437a6a513812c9f741e6436fc815a54fa5ec6372e66927fe9911ff3c267c630a7df1eb240","ssdeep":"1536:4UjB+ih0mpgfrYSbOVBUT/aYWjQLK+Gte1ckYGzOG+PC8j0QrjMa8Ht:4YSmpGUTVBUT/ejQLYte1clk+Xj0Wu","tlshash":"3d83025556a3fe47eb15f07951e930104061b37f022b69cbb23a13c1dad3c6cba263a6","first_seen":"2025-07-04T00:17:04.645939Z","last_seen":"2026-04-15T12:46:53.799958Z","times_seen":53,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":75,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Regular.ttf","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168260\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b280b0b5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-29144\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhG0dCuknCf6D0OQIY46HBAV7xqoeSUh2ZjonV55v1XdbtS0LIyF8RWf0pE1b4kqz5kFhTOulZPivnNyYIXC8YtygBfYXgDQXWkrCRolMISl9iu2a2hPh9qm%2FMDxuOuFjB3EsjA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-04-22T23:09:33.579312Z","times_seen":5560,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8MsmkrLngGeDlEPc360nG%2BLMwwgg97tIHfo%2BeDjFEOGFuHAjA%2F9GV2ZZ6B9uTv8H0LVjjTwTSMVY9CNdI3JLGWobt84Vr7EtaANnsl4qaf%2F0jBtOBSk9YqRsHwTsUo%2Fv%2FUPSKg%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: text/css\r\netag: W/\"69dcd476-7228\"\r\ncf-ray: 9ec89b266af05690-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29224,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"91d621c0f0e31fde3a9dc87f2c781664","sha1":"737355ad9e724ae621d9a64b38ee0b2804f521a9","sha256":"cf487da844ffed9cdee6ef2c012139db7e91d8c65332436eb9ceddb9b763ffd7","sha512":"b424991c1dbb3b14295d0f2de4782c85ec8ecfcde3fbdca270af1a47665e9728a086d788301a37ade7d193cdc20d3fd0556f4c517ed58852fd724a56393a68ba","ssdeep":"768:XyyOgh0FwE92m14JEtPeqFcFTTDiC3LcUOuFZBpXFVWM/wprtzP1NyNEFHwVBeYj:Xfh0m0X6JeeqydTDiGLlzjXzWKwprtzA","tlshash":"82d284d256642904b91bd8547e629f52736c9443920fccb9bbe0305ccfce2d995a3bce","first_seen":"2025-12-26T20:33:47.962717Z","last_seen":"2026-04-18T05:59:12.851705Z","times_seen":50,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/66.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/66.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18904\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-49d8\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/23/2026 19:05:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 933b74dd06bf85eec0db3fe1c88d9822\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18904,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 234x311, components 3","md5":"c97493b27df5540299ec38bf7d1b6067","sha1":"b5c946d33ca1211c9fbd53b254bd83c646ab0644","sha256":"54c2e4aad4e1b6d874075e4f3192865cd3faa677fc7d262895e2acedc6b51b2c","sha512":"262553cf159518280bcb450978e492e83fa470e47e9d05bbe132f75359de20ea8ff4d1a92b7d9871324ee40da7da805d987b345c7bac157168e523cd76bd441f","ssdeep":"384:cetItB0s1JfTQMGvzQivrzXfN3RTfW00OAN/JqCMBmOL+:cetIwgJOvzxnrmDNwv0Oq","tlshash":"6782e065840fcb9ee024bf2e838f67d442d511c8a1465592721c2bd6914cababfdcbf4","first_seen":"2025-10-05T04:03:40.833984Z","last_seen":"2026-04-15T06:07:56.858859Z","times_seen":18,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":76,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_star_black.svg","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_star_black.svg HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTUK3qiWYzTDnauI4hOU3JgxPYrLUTRwVpLldwen4Zt43yQwpZMbIBL%2BW0lk0aRMZEqBBkmhZThF%2BqQ0xQa0Mm3MW4ceRMYzqQrJMYhSqjmj1SiOgn5QLwNEWWrK%2Bap3FXDRpa8%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69dcd476-fc\"\r\ncf-ray: 9ec89b280b0a5690-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-04-18T06:01:45.920907Z","times_seen":118,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/74.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/74.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22283\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-570b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/08/2025 02:44:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 48e104fb448575871ba2438b42adb3ce\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x376, components 3","md5":"67f82f8509efb614f16ce662d8bc04d0","sha1":"bba21f2c525b615c5a18fb7b3e69d7c609e09632","sha256":"aa36f9f035f8847f3d4fe16588eaa9f3da08f9c3655872340deb9a87edbaea8d","sha512":"892eb18f6d64d9d664967df01d7f027930c7f49c58e050191c55270817df7ea8f1f6c2c5d7dd4da8ec375c4a7255953cfa7d0ebbcd3acfb1ae5b5b35961f4425","ssdeep":"384:SWdpI9aZTKnncoFWa0Pi0cUCA8F43/MH2e0mypOfjQ56tk5Bxz8+cJK4lFCwN/p1:SW3BZ8hF8Tz8yUH2e0myp2jQ6y5vGjl1","tlshash":"64a2f19d8f475a32cb32327488edd815451d450db3a52c786dafb8fcacf592530728e9","first_seen":"2025-11-07T14:13:50.811587Z","last_seen":"2026-04-15T06:09:40.802496Z","times_seen":19,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":306,"dns":0,"connect":0,"send":0,"wait":77,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/81.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/81.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22637\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-586d\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:29:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e5d355b2c331be09166cde5dfd238b3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22637,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 218x326, components 1","md5":"46ef9dde15e2bd7340fde8d32d1bd8e4","sha1":"8248e9028ed5b2a8e98cb936b616e2a9f53a7124","sha256":"0c64458ca7e1b061390399604debcf80c714415bd731e2703f23a88a1e0c6876","sha512":"85128b625a8a9407f3a64cec2d9326f7dbc6b4086efb25a33bc823f5de19aeb32ae4384ee63411652b31b0a0ed19b387ce235a0a91654b9af1f3a473aa0d050c","ssdeep":"384:h2hkjwVxc68Yg6F1rxCCrFYXSgjCFAEGmQcDWkJpF76nyx:h+rVpZ/DrFOUAEd4Wp8n+","tlshash":"b9a2e15ae31626afc2717606441c7700d330a2a2d67e22d48ab7d72ed2005ddc3ff7a2","first_seen":"2025-09-21T02:38:11.432419Z","last_seen":"2026-04-15T09:30:34.305568Z","times_seen":13,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":301,"dns":0,"connect":0,"send":0,"wait":76,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-2.webp","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-2.webp HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 198\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268afb5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-c6\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kf3i%2BI2jJxeKz8sVlM0K14vLuhjoMWQr9bLa4KAnS8uYCEoH4AxnHp%2BjT9Vb6MluDWcxu%2FCN9bpQZx13XN39SS9lrqQdhBpTZLO0rXJwASWzDp%2FvD0FR9hCnHyF0h%2FeclehnwR0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ac1664b06f112ae930716445d9765a9","sha1":"064752fdedd5ba2d38ef36617111de68133cf6b7","sha256":"c55aa588c9480ee7851d578b3306c80f5548f9ae5b3bc9afb5d126e5ef0652f0","sha512":"c00d5d5cb2e5e0afcf3b315a2649da2611ae0e3b75e5677aaf6e851bcb8afd49582161a06c80374e3b47942258ab54379cbfaa8a6ea772b2ad97a33a18fe69cc","ssdeep":"","tlshash":"dad02292cf2508280a732c0a0240442511f3589c20c3ea31a6a62cfa4c3f74b666aa00","first_seen":"2025-06-13T11:43:17.267674Z","last_seen":"2026-04-18T05:59:12.860765Z","times_seen":106,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_download.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_download.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67adffaa-226\"\r\nlast-modified: Thu, 13 Feb 2025 14:20:26 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 55b6f31766403873340a6d4e80455d05\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-04-21T03:43:05.021021Z","times_seen":191,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":373,"dns":1,"connect":20,"send":0,"wait":66,"receive":0,"ssl":394},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_3.webp?options=content","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/screen_3.webp?options=content HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 95182\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268af75690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-173ce\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B0yejWTjulM7GjLQ0rX4CJs%2BfJY5HmRKdXbsh99yeScThzISJNArmIZX0tK3zZT35XLgyWPQjVSKCdH1FSTznHFbPI3cnPrYqUej8HPlVSBuSsVKesZ4hn5rSu6FHoZ4S7yeCU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 576x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a560d880a6f6d7961bf380e7db35835","sha1":"99857a7cc34a5ac315025409762bb74481091d55","sha256":"51aaf6e36a119cfedf367505b81368a1db4c6f2c67794f0fdf05e8cf416be89e","sha512":"b5de8b98c67840b7de165fddd882d5d02c39f10318ff0ca1b422b01afb48ac960f6dfc4c9a4598840a049a0474a351385915fb1ba55471dd4ba0a3bd9d772f22","ssdeep":"1536:fWZO0uvhLhZn208XprNVI8HDAXLu+2MyDm5rgGRbWCHa+U+fZROFRkTkqX6jAuK:OWhLhZ208XVjHDA25sgC5Hav+/ObkzZD","tlshash":"f69312bda508a4681d442cae7fa2111c6f191622aeafc41e743ace532cf73c15ed47d8","first_seen":"2026-04-15T05:39:14.80733Z","last_seen":"2026-04-15T06:01:16.706766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/prompt.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/prompt.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BVfWCfpsKo1pI8MkdVIWYgVECtNZGoX%2F3oykxtedWWIsDOVqjePpgnQozgAYC%2BomyyO908%2FjVrVcJ2Rt6RNoYJRe5irXKp1mZUVQiBcH52STYjeJSN7MpLC3jALZimzfkKCRl0%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-1c5\"\r\ncf-ray: 9ec89b26eb035690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-04-18T05:59:12.862993Z","times_seen":52,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/main-function.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/main-function.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlxDw1ovuCpzAr%2FX4mMSQQ1sZ6ZZ0oPpSPx8x6UYpsXvsk8BonCFB3poPyPWiTGUm4BSbpu%2FhPYjswVi8tXJSf3IsARuQhC%2FDSIW2Y1tPqnh6%2F%2BzLiXDoRYEaVjzmAXAU1jbdVk%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-371e1\"\r\ncf-ray: 9ec89b26eb045690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6970cab15237bb526e29875a6e8593c6","sha1":"f1df1fd91f2e9477fad9e364b3f97179b24da0c7","sha256":"77b7f1a583ad9c81b922106510fb267c573613f8ab55226902a5836d2f69fd0d","sha512":"a26c959b7f7187be122a465d76d3369950103dea2294b463a2986294730b37ec858a8483580b8894eb58c68b7e8d0b955595864dfc6a4a004f44a3e5f04aebac","ssdeep":"3072:mzdYnb5Z7dDcMd97k0egNFiaFaGxtYmDQ/Qe2+5G:mzmb/7dDFd1/eg/iaFbsmEQF+5G","tlshash":"b524a52263c47d4112478f76bb1ff6f5ea2a5abcb4580c8fe1447d90e7ea905eae0530","first_seen":"2026-04-15T05:39:14.808871Z","last_seen":"2026-04-15T06:01:16.71577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/play.svg","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:48.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/play.svg HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX78MAdpOESDLBKPP%2BJhqclaLmOh3xIIEspraWbNVLPUsPvDOrphVEzjCjVbA94epWKpIg37xTPMnURGaPnhyRyOlxfBypN2jmZGm9bL5UV9QNFew4YyJaklYg9z6wZvexviZxo%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:48 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69dcd476-30f\"\r\ncf-ray: 9ec89b2c0b1f5690-OSL\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e8010a745f6289a8a5c3d004b0c456","sha1":"db310316b0c190c690d8dbec03dd95fb11d8c0c5","sha256":"b1c80209f6868f3c7f31b29ee3d98381eac5bc4fec062e14d607e11fd42ab927","sha512":"6ac6595f6b76563ea726d35140b510afce3568b514e07ab8ce8d3b7caa57e45e3478581b865e29a2c7924c05ef0a12235e7056b58ece2b4a51ca3f4cec34c749","ssdeep":"","tlshash":"ef01cbb281d8a756407903ac98bc1481e8e5c85bb8349489bb0f0062ef7c4d3b48b719","first_seen":"2025-07-04T00:08:39.112232Z","last_seen":"2026-04-18T05:59:12.850241Z","times_seen":67,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:38:46.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid= HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9ec89b233881c759-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: cl_st=b; expires=Thu, 16 Apr 2026 05:38:47 GMT; Max-Age=86400; path=/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXv7JaaA%2Fyp3Lbju7GP0p6CuXWGD8k62b%2B6E433%2B3nYTyLNYR6R6pwqwUz8Rnwq5%2FGmIrYwjtZNS45Z4cYI%2ByDgYxmY0nD6ApSwUIQ5i55BacB9DxbVeWeo9nI4rTjchbyYr278%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110104,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"cef2f00b05d75189487a14e1295e5e57","sha1":"78c3090b6e50cb8f73ecbcc914d61e92cb1e470a","sha256":"f32416d56c8cbb514d400b96f1c7bde6915f1988ce428696c34b9800eceff21d","sha512":"8ef452e6a109567d6cddb5d0546a078ee3d65e9df01cb84b1608180667835e3dc58db163d80fc41ade04c1d24b6d91b4e69f7411280973df8a56a8a54c28eda8","ssdeep":"1536:Qz0fNE7VznFEJyFIbDHL/i+ecKEcK3jD65Cw3s424nK9spSrvlgH:XfEnAvlgH","tlshash":"e5b35730a8f254370153d0816f669b1b6ee0fa078a464305bbbd87e46fead8bed0755c","first_seen":"2026-04-15T05:39:14.811281Z","last_seen":"2026-04-15T06:01:16.718476Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/sendUpdateLead.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/sendUpdateLead.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQn%2FcAsuFOF4kCMSvl5umhxix5Uzsx7tsQAdJjRrJS%2BVSF6oTXsXEBg49YMhj1CRNyWELrm9JXH1nOe%2FY8rqGig6ntUaF6%2FfZo0BG2DQsZfP3tt%2FxAwqypZjX%2F8IgIBnojo2Zh4%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-fbd\"\r\ncf-ray: 9ec89b266aee5690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4029,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d53fda40818adbeaa6edc9d4a9a0aed4","sha1":"31b24c9416876b8b7f6cd28e48e503bc23325092","sha256":"919ce9b3424f34a538017fcc1b995e91ec808e1b5ee0a3ab495bc20ce328e8b6","sha512":"4992784b488ca29dfb48fb9f1e2c1cf84f58ad870470c4e6fdd4196fc84dfaf13c3e8b4e66398bd6221564c15cd69df41b6e6c42eea05ab6cefca081fe0b3f20","ssdeep":"","tlshash":"ff813f44a8a771ca65b320b99bdf010ab2b2406b1056d4447c0cbf44afe5a3f16befdd","first_seen":"2026-04-15T05:39:14.812388Z","last_seen":"2026-04-15T06:09:40.843737Z","times_seen":6,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/70.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/70.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24022\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-5dd6\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 20:12:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 773850119cc29f86250e69a4ab8f8e67\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 203x305, components 3","md5":"75874901cb2990c07b4399d2fcba65c8","sha1":"234d18a2571211998b9cfd2174b2fb7ac1bb9ebf","sha256":"4ca639850ebb197385d02a997be2e1b5e5cda54b5ef423005343e39c7ed0701e","sha512":"06dd8a3632efd7b9ff6ad294bb3b900fb784b10c42cf350813c809e81f3c3ede1f2ebed48562ef8d990b9383004bad19fb68b501b395d966989d010d8f5ceffa","ssdeep":"384:tQXdWD9bTlFDAd7QMgsWIkTl+kCVauNKn79ziMilFhRzj9wFf7j46l8o3lrSCitP:tMdKbFmEIYUCuDhR+7j46lfutxYW","tlshash":"8ab2e10d18fb870b4d1231f58b48f6040ebaa59e630b66a1946959f4bff4fc2370864e","first_seen":"2025-06-03T02:54:06.018107Z","last_seen":"2026-04-15T06:01:16.690942Z","times_seen":13,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":311,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/94.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/94.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046d-2071\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:33 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eaedeec16acddad3226d373d8c78d516\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 370x243, components 3","md5":"413283114ae16d4557db89048704ffc0","sha1":"67013b89105cfc02f078493ffd0780feca0312d0","sha256":"fdd2a38eef481ae41f46de3cd4f662d402c770f110a53e9b28bd8d888f6a1259","sha512":"3e7e3038bda76bbba8a3d18edc0a8e51ad9805da83ba19401d4b65116e76e1e1e743cce502dc7f980e3756fe9af646087475f65b9c415e6f0218507917bd4040","ssdeep":"192:+vJLDbWCsR/QBEveBc5byEbbW0odt01gXYbbbbbg1ckd7ydLLouHqb57r3D:2eCbOveBck0ode1QB1youA7rT","tlshash":"9f028c532863e05f74a1c8a007503d29692f08a834d35362d49e3bd3f3bfe6362694a5","first_seen":"2025-10-13T14:16:13.710846Z","last_seen":"2026-04-15T06:09:40.818774Z","times_seen":13,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":308,"dns":0,"connect":0,"send":0,"wait":83,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/6.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/6.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14501\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed045f-38a5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:19 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5275393bbe120b957fe0c07f5444297d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 252x316, components 3","md5":"cebabd9852642d43036b137a68248990","sha1":"41747badfdaf37e585a98d9f2a7f033fc5abe6f2","sha256":"f8fd719ac5c28d4b9874ab8484aa04ed29980d3c67588a0a93cb34bbb628f2b8","sha512":"4ae3c222903eaf7a42baae1ee597bbecf466b1d241646adcef470625f950f09753b18857712598451c951107f05979dc50063c696955f81b412229fe13c36e08","ssdeep":"384:UFQHuATqYdpov4+hTWUjPIhZTJNXURtkC1ybTrSVWL:UFUr3ITTWi2TJNa/kTrnL","tlshash":"7f52c0a5fe53ec0681220ef5eb5517bcc06fb5c7ac0adb8884d922f451eb2d8306685e","first_seen":"2025-04-06T10:47:32.171403Z","last_seen":"2026-04-18T06:01:10.807512Z","times_seen":27,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":72,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/10.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/10.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25818\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-64da\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 14:42:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 25b26606d4415a9cc00deff475ce103a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x300, components 3","md5":"f77e5a027fb5fce39da9544c07f3b442","sha1":"3cd93a194a3ef118ae3c617298e0efd01f37b467","sha256":"107cebc741036880c2876e2e39d1da9df82f03acaa155a4fc5fb8a3e421b2456","sha512":"81ab496f889f6f29b4f81bc3883da77b386042e3b0536257961f86ba677a0f863a6c445b39fdfb590c0785b6a7f1dbaa43554eef5b045d5f92732387b6cf3314","ssdeep":"768:Y9VWotaEvO5iQ92KUHsr69xFguaNz7137NA3:Y9VWoYEhQAKUM+nFg7Q","tlshash":"02c2e1a9a31c770883389e4458aff9f4b7ee4a73f0566446902417ff282541b392bd7c","first_seen":"2025-07-04T00:17:04.651726Z","last_seen":"2026-04-15T06:04:42.797087Z","times_seen":11,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":72,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_close.png","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_close.png HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 427\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b26eaff5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-1ab\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2Bc3DCPlMR7nw%2Bjl4qHvoCMKS8Tnq6GjqaXKoN5DiMen%2Bosu1pyokhEIbtCWj7T%2FPavRf7NcaOCX4LnKJta%2F%2B8XjGuwGCr%2BALlR2FoffkYmbDALymgF3yF1veCX7AZimHZJZlio%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-04-21T03:43:04.982094Z","times_seen":200,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/82.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/82.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18726\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-4926\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 04:22:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2c149ca968ea830f1c93afcb797f6afb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18726,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x360, components 3","md5":"8f11e92cb08f49aaa0b9bcc60cafccf2","sha1":"ffdac25ad367fb5ac3612220e3c18800f6c3aa52","sha256":"f059b1a5e13049e5c13356ed4145494b019a059539475929de8ff83f13eb26c5","sha512":"ed19eedd2ab28ced37145504dc05452f5c6649fb7acc39db17c823973bb3e84ffb2eacfa105ededea47043b9c6c1dc8e1fdf1836f6c3ca4dbd8cf1df726553ae","ssdeep":"384:RgPwAEUDqS6vhg80HhRV3ZAGTkejyuEjzNVniqA7FSo28+QoePmxj:qIPW8CzXAGTHgjBViqA7QXxj","tlshash":"9782d0ef222403709eb67a3dced914fc617c575a14b0b8649ec401f8d72c1a1dabad5d","first_seen":"2025-09-22T08:45:43.438861Z","last_seen":"2026-04-15T06:07:56.875034Z","times_seen":18,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":76,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/60.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/60.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23797\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-5cf5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:45\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3603fc63d6503e377ed0d76a784e9aab\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23797,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"c1b084bdbe508e4b2991387a0295be6f","sha1":"1f0b56d2800c03e7a8effb69440857f3663a250b","sha256":"c91ae1aefb496d7cf7359ac9ee866a9a352274ec1bc12eba2efb422b2f2d8f36","sha512":"b08cda4dbf5c934f53128c638a584f9623c2a56d6f491925033df16da6354b3078dcce89c5b7af5f59abf887c7bb06184f7ded60dc4b0e1317439e6354c3ebe3","ssdeep":"384:5GI4zQG5e0LHFLlGg/P5003mb2M1o1UZ6nWSxaxDlcECd4B7+VpJp1+SiD91nBVw:tIFe0rFZGgZvmbgKSaxDlcECI+VpJpgg","tlshash":"feb2e19513c862627b9ab8f9e929379e05cd77c1b173105ac130a4f5e3884edbce85ce","first_seen":"2025-10-03T17:42:24.248863Z","last_seen":"2026-04-15T06:09:15.092841Z","times_seen":17,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":297,"dns":0,"connect":0,"send":0,"wait":76,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/uaParser.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/uaParser.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7mhlJiEgI4ZYfFFChWC9VBt0RusnXBsusz3c6w%2BD4KlGoTUeUri16AkKoQVTLlVhv4G%2FhfNorQOLW%2FIVrj%2FkYE7WbQ%2FOaScG9vJkGBjep%2BOHgiTD4g7AwJPiu5tOpr1uSYGkbk%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-4bbc\"\r\ncf-ray: 9ec89b26eb015690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-04-21T03:43:04.992151Z","times_seen":200,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/f4fd7ae5-7373-4beb-bb27-b8a8bce31153/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"OPTIONS /api/leads/link/f4fd7ae5-7373-4beb-bb27-b8a8bce31153/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bet-spindrift.club/\r\nOrigin: https://bet-spindrift.club\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bet-spindrift.club\r\naccess-control-allow-headers: content-type\r\nx-iplb-request-id: A29EDE63:2927_3626401C:0050_69DF2467_E27C7C:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncache-control: private\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgGjIniEEbd2YE7uq63%2F6koO%2BhfEhaf%2FHQNHRA4j%2FiVfawCz2fLkwm2OhSxpP4oh7w9VPNpRreOrMHKIycp%2B7ylBTb2s6RNshNYM8aJUsYzcEEyZPK%2FqR9PN5j%2F7kVnPXJg%3D\"}]}\r\ncf-ray: 9ec89b294e0356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-22T22:07:48.231561Z","times_seen":274263,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":65,"dns":1,"connect":1,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_point.svg","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_point.svg HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMtqN7aTPnwZbL6EuB%2BUk0BOv3fG6WtJDStHMNgCx26FP5FYF7tBmF7FQdYENjyNJ6dKds9YH0e1RKI9ljc2SspEkABixdBPLwdZWQVbR0mkLXe%2FGlffYhn3%2F0%2FbpR94X0eOoOI%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69dcd476-3b5\"\r\ncf-ray: 9ec89b267af35690-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-04-21T03:43:04.995132Z","times_seen":189,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/20.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/20.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10043\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-273b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d45311372a436fbefff8fee8cf8bfd0a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x289, components 1","md5":"5876ec38abe0c1eb46f951c619e0c7b8","sha1":"dbb4f97f9b212be2f5e9f7c0a684a31ce0528d7e","sha256":"3fe0db952d576365f3ff1f9794b920c713854ab773677a991a19c28091e26187","sha512":"60c98d5575f7ffba3203fd8bc714e0f2217300d02a156efb8b69d455ca65a7554c3f800270a4d70944ceffa25c95dc882c95d1545d58cd0f84fe79fda63a63d5","ssdeep":"192:TMzNB/n8nIw1FwNL3LHq1Cs6BkW8PU3DK16EtE5KUTs7gorCvy3epNA8nJkHaH:gTn8h1FwL3LKIsBWEU386qMWgaCvlBuK","tlshash":"cc22be112003caa4e2a472dc4de34726ed9443cf75aa42e87552c541e76d3b2abcfd9d","first_seen":"2025-08-04T09:14:47.409257Z","last_seen":"2026-04-15T06:07:56.874445Z","times_seen":11,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":383,"dns":0,"connect":19,"send":0,"wait":66,"receive":0,"ssl":450},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/68.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/68.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7217\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-1c31\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7aac90182943177efad478429d568112\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7217,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 153x225, components 3","md5":"34755471756c55a765fcf28fb459da5f","sha1":"8164a6469f050744405af63724c55c0771e02eb3","sha256":"26e4f4449484a9468ffda1cd3f691cb1931ada8c1b002ba4d90e9ca6a64ab493","sha512":"7b9f83c38705e71b2c4bf561facaca5d6689771f0a93d497db16270a35219bed1b1ea0bbfc3742fc69286bbe933d1c335e8ad109fb30a9ff094da6d99ecaf292","ssdeep":"192:gCHsLSlC8Ees3J9sC1AoqBXYnZI2RMEcxXPtle:gIsLSlCheIq86NPtle","tlshash":"dde1b04766690e30f50413b1cafb1faa0ef9b54374be8c2c179924ec6e6aac1800a114","first_seen":"2025-09-22T08:45:43.428368Z","last_seen":"2026-04-18T05:59:12.845128Z","times_seen":21,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":292,"dns":0,"connect":0,"send":0,"wait":73,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/jquery.min.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/jquery.min.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ue%2B7Gm9il3jzsIGjg5GZTTGbjXY%2Fg%2FM8Oc2Ot8%2BLBaZ%2BAXwLlM6HFzzO6LvlvZxIs7EerOwYoAMf5Oc5oQLQsgUuFprTiQtc1Ej%2BAi2RuRQFpPz30%2BjPdNVwHXtgtZf33Dei3YY%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-155ec\"\r\ncf-ray: 9ec89b26eb005690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-04-22T21:57:18.236223Z","times_seen":23427,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Medium.ttf","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168644\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b281b0c5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-292c4\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOIg%2Fsjk1jedHWxSaPETAEC22c24AXC%2FXR%2BOPPzOdBIkvK4tsDExlixdLheW3o3OnTP3EGU9MfDsqpn0E8D%2Fv0G1MmNPB8iQ%2BdHxicTiHLfSnpmSEDI164GF4bjIr9OW2C5z8AY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-04-22T22:01:31.264084Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_zoom.svg","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/icon_zoom.svg HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1I2xMQGDOWKaimORVx7FhnvP7oz7w7Zf1MikXLKamUybUzX%2Bk8PgH06%2B3b1TTbkJ2I3lfzw0Hw8Ce5%2FohYXiK5ACR8Lg95guYEdpUzUSPqWb%2BaBsG8YTpUXtfnELJDbTHN4S6ks%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69dcd476-3f2\"\r\ncf-ray: 9ec89b267af25690-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-04-21T03:43:05.005637Z","times_seen":189,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf247d-1450\"\r\nlast-modified: Fri, 16 Aug 2024 10:05:49 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ed35ba3ee8be6091bb47d824f2e807ba\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24320f300aafbe3211b8b6a9a8f8dba6","sha1":"fa8ca7b908c4de4f51a45c1ef7f79582dc2fab22","sha256":"8e30d059ae297c9c231e28ccb6637a6fa5a95f8d29643a76c36ac63180d617e7","sha512":"8cb2f54d1b422833925d29a93f30b2fa9b42288550fe11de555d270c81a05609528806c98c78f6a5d0eac4b1792651a0a73dc4a0db0ae0e1ccb075d4743de0cd","ssdeep":"96:2gBnsssqWq3S22mN0yavi97D+Xw+nw8a47T7Yj99EVcw/:XnsnI3S2EJvo7D18aSH89WV","tlshash":"10b17cb7352842ccc1b86964b4275943d2204e12831e2af59b1812d7ca2a76cfad2b13","first_seen":"2025-03-26T16:41:42.434031Z","last_seen":"2026-04-21T03:43:04.987691Z","times_seen":160,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":429,"dns":0,"connect":17,"send":0,"wait":34,"receive":3,"ssl":467},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/44.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/44.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7365\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0465-1cc5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:25 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 03:01:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3ae07d1729175b03e7630bc37c524856\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 243x319, components 3","md5":"b8a5f2b2b2789ccb7b9209a3c8276e03","sha1":"b337904b493e8d9a006668698049585fb248e07b","sha256":"f05132ba3911566be3e19e3535b0a2790edebc6e7076320614006bfeb138d65c","sha512":"4979a9316b13d89d9adbc329ac2a0e77879e2f69e44dda488955e338788199f8fd7d1d043186d690a4d2e44b401c4b4b41dc56317e88c72f9bcc27b22fd6e932","ssdeep":"192:7P33NXLJIT3gGfOuEbs6E5TA2ZRYkY6hBBSyVgqklsJujq:rZLiMGfOuEbx2YABBSeHH","tlshash":"8be19e76176e4c17ba7537309ef8abb45543e8d947244362f689a2ff53a218f4073822","first_seen":"2025-06-03T02:54:05.982767Z","last_seen":"2026-04-18T06:01:45.894922Z","times_seen":18,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":77,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/25.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/25.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36872\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-9008\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 106fe793bc97f49fd9b64807cef5d5ee\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 420x280, components 3","md5":"731d998e4ae651cb1661536e10f477eb","sha1":"0582b3fed7b4c3c40c1a446b6d85d4e22f866971","sha256":"2582d3a9825e1ede18effd01d22333006e37497d22dcc7e579136f46a120233b","sha512":"7db0c1545a9c044a7acdc62387fc1619c0327346cecb9ba3e9b44778d99f4eb9fab852df8f5efa829c8076a3e76a192ad1ceb17d8a2860e0f937b765970a7aab","ssdeep":"768:mbdNhY2F9reY9wipGK1guQ6AIR1oWOZNWs4brj5r:QDdfrer2GBN6AI8W2grV","tlshash":"2cf2f20c36f83567eb169bbf01e963a3181b821326837dd081fa16d8a8f37bd5241783","first_seen":"2025-10-13T17:06:19.591044Z","last_seen":"2026-04-15T06:04:42.811346Z","times_seen":9,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":76,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/73.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/73.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31904\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-7ca0\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 17:27:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6119b53f941193f2d9873e804198b315\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31904,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"018e8739c86fcdce97eef46ad56afb4e","sha1":"fbbf4976709087565357d24e30ac46c6964c2667","sha256":"07bc7c8b08607f6c954768ffb528b9d595be8bc99af8f5079b83efaeb5b55eea","sha512":"d273cdc410043d0f2d559986f1caae3213d1389b4df7073eccfed584edb04a9a9e66f5082e68c4036335215030fa167460151e2f8981321118dbbcd100d3874d","ssdeep":"768:OtXlKycoPLkacxWtlVE5zQXcPA4kkvqHNrlzYUT:sVsFnmq5zQsIDkclzN","tlshash":"a0e2e1552b77e8ce210e48f9d3c525ec9e82d67e004538820ad076f6da59efdc0f9e25","first_seen":"2025-09-19T05:20:47.33654Z","last_seen":"2026-04-18T06:01:45.905658Z","times_seen":17,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":74,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/translate.js","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/js/translate.js HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yCI%2BJuyr1BfyoTRS%2B0lnG%2F%2B9XSkSB7VtllH4XEusMy1vxk3PGuGARglNTj601giJbt9rJ4Ej7uXKgzSFIgye1OhZWK6HJISWi3ItaKcDhbBrKTfujTsDCEGduHKmnqlWDRhdVg%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69dcd476-e35\"\r\ncf-ray: 9ec89b26eb025690-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-04-18T05:59:12.83921Z","times_seen":45,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Light.ttf","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Light.ttf HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167000\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b282b0e5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-28c58\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBuygTGjQV1Dba2W6jZsV0K0E4VUEIyU0yjVOIt9WwSyBB5WYLkHjaIteDO8RkBroPhP8Ht7PMHBd9UXIxYuTyS9x%2FRCO05lhaW%2FN%2Fa0%2Bcx575WF%2BbVcfSOYmy%2BNf%2FdwyJB5r8k%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167000,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh","md5":"881e150ab929e26d1f812c4342c15a7c","sha1":"18788c5d630fa695f9283f6393bfa541b2031508","sha256":"c576c50642271bcdbfffed04f92dc8d6a981daf300914d0a20c8a5a5a57015c7","sha512":"af18febdf3e0d5fc8111e6335bd8cc4fc8dd944910db8a4f3ebae284e3d1064eb793a25588007e3d1cee24051e11cf3328951a3f708375856d54176a53701b49","ssdeep":"3072:BXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPte/TxDuNOIOU7og2NE/:3qXpSIE6Ey/ux0WUMxNE/","tlshash":"daf3e501d245aa3dcad6f2787c7cb3be4875e429fd5a652730d6ab3255c4800ec68bbc","first_seen":"2023-05-08T00:29:25Z","last_seen":"2026-04-22T00:08:59.479996Z","times_seen":799,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Bold.ttf","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167336\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b281b0d5690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-28da8\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4y0A2pAKLnA8na1VL%2FrpTlNeCRjgOzKLajQj0%2FPOTzXyQmduhFb%2BL%2FNFC6brwraU2V8GvYbrJ3gix1RG7kkDnbv%2B3L9qEhjoIHmFRdM%2FMMgcKo6WAZ07ulC%2BgRFeSx22HqQP1w%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-04-22T19:01:22.713263Z","times_seen":5446,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/62.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/62.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16468\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-4054\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 02:22:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6eca5dc14f2b0debb20ffc331b9709d5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16468,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"d920f1cd5b461e90d4d4f00392970dbd","sha1":"d82b8df31bc8510e37f58500951a6745d564571c","sha256":"97e439c60d6017d0ee2a0110045578d6a4d0746032f76fe8a64f2d8b197d77d9","sha512":"db558479c52134682e547dc000345513771b906772795fd95effa243d4cd55b2849a53f57a3afb56f729457530901bd622fb9cef118eb8eccf8c2612a6a1236a","ssdeep":"384:r1AEdVN1kRx1NYKfW02XUx61+5leVV82b8AGNcWz6qDl:rCEd/1SYgX56n+48AGNcWz6Kl","tlshash":"5172d02225236ddccdc99b31c98307fa235bb8ae80ed4533e12567f53a3ba4619d135e","first_seen":"2025-06-02T23:22:33.505589Z","last_seen":"2026-04-15T06:01:16.700257Z","times_seen":30,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/86.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/86.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13334\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-3416\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 14:42:56\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 991eee358e19334d40681721a39abcd9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 211x310, components 1","md5":"acfdae8040e676256465faa4601a10cd","sha1":"ff6d44f792dda4c97643fee496b366653580f92c","sha256":"eee169bd35b4bfaf69d9b7f1cc8e6a1d0015fa9116b293004a9ddefb9aa9cef9","sha512":"5d81a2c6e20fb9f859d2ab0fd710d628df90558da1f2a9ed44d09a466c1f171e3a293929376b59bea7cb209569f9c68a46a48fb98f82eccdeb6197f3ed5be69a","ssdeep":"384:g1eeW2Iy+aAMwG0d3LPYH6WqMSe2E0Qsz0:gQeW2Iva7B0VLAH44QI","tlshash":"e752d0639ee47113d2818e71dae779df65084abc696a1b9d2238e99e7c3092f3240416","first_seen":"2025-09-22T08:45:43.454494Z","last_seen":"2026-04-15T09:30:34.29072Z","times_seen":18,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":75,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/78.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/78.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14895\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-3a2f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ecabe2df0ce142abbaf89584b1ad3414\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3","md5":"74134aa47f5eaf8884ee297fb8087ee7","sha1":"788c8e34e5a602e481fd37de3da0da74c2783d58","sha256":"5fefe06f1364b947d07bccde51c20b67e00d0983975fe25e6b16928a5bc2f214","sha512":"69c75b46c33b45b999c99888f54d2ff81b78ffc91c2287f646ebdd77e2d5d1f440ba793a933aedda0124eae126e6459a7354e3c84461a5ddd4349fe870ab6999","ssdeep":"384:RlhKOWBwbX4ROy2YHXX+2wY5fd7h06W4CqmLI:RpWB8KZXvw81has","tlshash":"4a62d0212304fc1ad3ae52e2483cdfc7910e391e96d28a71c17d7b4359e9d999d0d688","first_seen":"2025-06-19T06:56:57.165167Z","last_seen":"2026-04-15T06:08:03.063786Z","times_seen":16,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":72,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/34.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/34.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17453\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-442d\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d515b850ec2cc6b13a259c9bf2da9074\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17453,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x324, components 3","md5":"f1a858853092268d29fa08bb4be31f59","sha1":"e51c36018fffc3bdd07901dfdfaade828f6c6255","sha256":"39a6d2afbc3dd45f90f34b6593758324acc49ae0812bfe88c17f19f1a3a3199a","sha512":"eaca7841f23137fa701f17408064bd63bfac2e47e258d83608ce9c2b08bd07bd568737cb35e4ec03bc3f8e15e34498164bd4a7376ab7e8117b27beca1dc791c5","ssdeep":"384:BS1vbCkCwH92i49sCGyC3vuLFZcWHfDHk580hiHyOtV7l:B8vxLHkv5WfuLFKyP08l","tlshash":"7872e1eeb3b992dc8960147582afdbdc3bb5dc029a17d275568780ea30db364166c600","first_seen":"2025-04-20T09:00:58.02573Z","last_seen":"2026-04-18T05:59:12.835513Z","times_seen":21,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":69,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-4.webp","fqdn":"bet-spindrift.club","domain":"bet-spindrift.club","tld":"club"},"ip":{"addr":"172.67.180.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bet-spindrift.club","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Apr 2026 21:48:02 GMT","end":"Fri, 10 Jul 2026 21:48:01 GMT"},"fingerprint":{"sha1":"C8:0D:27:79:69:4D:4C:72:13:B9:92:C1:16:39:CF:90:F9:47:0C:41","sha256":"69:0C:1D:95:BF:54:48:37:FC:FB:E7:D2:44:06:9E:01:41:24:47:B0:AE:6B:09:2D:53:2A:43:48:95:56:BD:7C"}}},"request":{"raw":"GET /daf6c690-12bf-4733-ab88-5c5ecad98894/en/images/security_icon_n-4.webp HTTP/1.1\r\nHost: bet-spindrift.club\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b268af95690-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69dcd476-c8\"\r\nlast-modified: Mon, 13 Apr 2026 11:33:10 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80GnaymvKruuwesovq40dNaWzTgnKzAKygUf4uVX0nVE5p8I0zix%2B8OD9sEX7llPLnBuNOPyiQIoOud6LOmdLD8pK8kRdkHB6kRgDLK7PFSA2eMimYIpGowgolH3lWC3L1L%2FqfY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-04-22T12:34:52.440547Z","times_seen":773,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"bet-spindrift.club","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/16.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/16.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17050\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-429a\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 01beb22f9800220c8c954d0db419d842\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 219x328, components 3","md5":"6673c64ede425f2f21c14684cf04bffa","sha1":"e6d1b98886e655cae557ad6cd17c22c87807771e","sha256":"947ae3684bc3b9b5be493b7b35148ef43ff6d508965bb128e7e8d935b3bf81fd","sha512":"33b976cec85c44ebdc608d1eb3b7aaa058b275dcdd809a711f273a84dc5135bb5c470d94c4f9a7658d8bef12e4e6ae259f9682fe7455c73ee2eb80a47c1b475e","ssdeep":"384:wUFa3tHhKXAxoDGjmumUdWctfrlJAGpdE+:UtHhwRDPBUdWExJ2+","tlshash":"a672d19b911e2c3ba8303ee1ef143b51689fcad2274032ca525dd0cd6d916329e3948d","first_seen":"2025-10-18T10:04:02.419807Z","last_seen":"2026-04-15T06:01:16.665813Z","times_seen":14,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":319,"dns":0,"connect":0,"send":0,"wait":76,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/wolf.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/wolf.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 137564\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-2195c\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/10/2026 05:55:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 75fb5f28864dbc8cb78f05acf93f4b27\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":137564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef8df6e855e45f74c02cb4859599217f","sha1":"d7b73f4c1d923758431dee5078f33eacbd7fdb58","sha256":"f8689ccf0837be953f3a23c301235a6b0a65c9df28f2f03b42717dbde532d553","sha512":"5ade7656026bf9b96f0c532071fc9041716d419b90e87cda3c86279b1b6f7fc0ab91b2211876d8fb10394dcf7d48582fecb330b18abd8ad09ecfe3fc30e8ac50","ssdeep":"3072:scsx66esCxJ1PChLSTnZIx21LsG0KCNEu2jr29WH6+P8Gl:hXzjdP4LEnZIwr07NEu2jr2KfD","tlshash":"31d31296b330826cfc41f337aaccbfc5776166b8c1143841e6927f71a670168c9b969a","first_seen":"2025-03-26T16:41:42.431484Z","last_seen":"2026-04-15T06:01:16.709462Z","times_seen":24,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":75,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/21.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bet-spindrift.club/daf6c690-12bf-4733-ab88-5c5ecad98894/en/?lead_info=bGVhZF91dWlkPWY0ZmQ3YWU1LTczNzMtNGJlYi1iYjI3LWI4YThiY2UzMTE1MyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL2VwaWN0cmNrLmNvbS9jbGljaz9rZXk9ZGE0YjdlOTg1ZDVlNDMzMWJiZGY1MWI1ZDA0NmIzYTMmbGVhZF9pZD1mNGZkN2FlNS03MzczLTRiZWItYmIyNy1iOGE4YmNlMzExNTMmc3ViMT17c3ViMX0mc3ViND17c3ViNH0mc3ViNT17c3ViNX0mc3ViNj17c3ViNn0mc3ViMz17c3ViM30mc3ViMj17c3ViMn0mb25lc2lnbmFsX3VzZXJfaWQ9e3B1c2hfc3ViY19pZH0maW5zdGFsbF90eXBlPXtpbnN0YWxsX3R5cGV9Cg\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:47.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/21.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bet-spindrift.club/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16431\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-402f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 02:58:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8ca9b80cf239fe1fdec917e422d1ee9f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x288, components 3","md5":"8ec6504c45d784a607a9c902d3fe8a7e","sha1":"dc2f25414eb66297453431a433b87e473917240e","sha256":"7ca951ff27ce448fbea839a960fe10e83cce017f706165a8723aec4e58c61cec","sha512":"67c60b612d279d2981221789a7d3f85373bc7dc23a22251a276b9c0a6f47f2584e7ec9b65ae746f28885334c8d0903e33ad7955b8d207df3e8856ba83a862cb2","ssdeep":"384:M1RM9vk5exw9Fcdz1w9UMhkru9d+hzilyrtvc:MTM9vYexUoK9UMOQMViEZc","tlshash":"1572c09b4129e766c168ee22780f076074342fda2e1916cd04db9efb86bd1e596083b8","first_seen":"2025-10-11T09:20:45.388653Z","last_seen":"2026-04-15T06:07:56.920417Z","times_seen":10,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":296,"dns":0,"connect":0,"send":0,"wait":76,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
